Overview:
Rapiscan Systems is an industry leader in detection technology, providing cargo and vehicle inspection systems and services for ports, borders, military, high-threat facilities, and checkpoints to help customers combat terrorism, drug smuggling, illegal immigration, and trade fraud. We offer a broad array of scanning system configurations that leverage low-, medium-, and high-energy X-ray technology-or multiple X-ray technologies-to address each customer's unique security application requirements. Our commitment to excellence in imaging performance, innovative design, and uncompromising quality ensures our solutions consistently deliver best-in-class imaging, high reliability, and operator satisfaction, to help customers find threats and contraband with ease and confidence.
We are seeking a Cyber Security Engineer for cloud-based and hosted systems and services to support their border protection and transportation security products. The successful candidate will play a crucial role in safeguarding the organization’s cloud-based and hosted infrastructure and services. They must possess excellent communication skills and be capable of developing or leading the development of design documentation. The individual should reliably complete a wide range of assignments with minimal supervision and proactively communicate progress or any issues encountered. Attention to detail and the ability to organize and coordinate the completion of multiple concurrent tasks are essential for this role.
Responsibilities:
- Design, implement, and manage security measures for cloud and hosted services.
-
Monitor and analyze security events and incidents to identify potential threats.
-
Develop and maintain security policies, procedures, and documentation.
-
Conduct regular security assessments and vulnerability testing.
-
Collaborate with cross-functional teams to ensure security best practices are integrated into all stages of the cloud service lifecycle.
-
Respond to security incidents and provide detailed analysis and remediation recommendations.
-
Stay up-to-date with the latest security trends, threats, and technology solutions.
-
Own the efforts to develop and maintain cyber security design documentation.
-
Analyze, report on and assist in management of security-related risks, including reporting on outcomes and proposing further security improvements.
-
Help with the constant process of educating product design staff and organization stakeholders on cyber security and how it affects the product design and support efforts.
-
Own the process of defining innovative solutions to secure and support cloud and hosted solutions.
-
Participate in and assist with development or product test protocols. These protocols should allow for efficient assessment of product vulnerabilities and include work with engineering and provide recommendations of remediation alternatives.
-
Work with product engineering teams to help them understand cyber security test results and identify remediation techniques that could be employed to address the findings.
-
Lead efforts to assess the vulnerability of products to new and emergent threats. This includes work to publish and defend the results of the analysis and the planned remediations. Efforts must identify root cause and identify remediation strategies as needed. Work to develop communications from those assessments that will inform internal engineering, service and external customers.
-
Able to work, influence and lead in a highly cross-functional team environment.
-
Proactively support use of standardized processes. Prepare and document standard operating procedures and protocols to help ensure the security of our products as they are designed, developed, supported, and used.
-
Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork.
-
Demonstrate behavior consistent with the company’s Code of Ethics and Conduct.
-
It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem.
-
Duties may be modified or assigned at any time to meet the needs of the business.
Qualifications:
- Bachelor’s degree in Computer Science, Information Security, Engineering, or related field required.
-
5+ years of work experience in information technology with a focus and understanding of cloud security principles and best practices required.
-
Prior experience in supporting product design efforts and leading cyber security design efforts that are based on holistic industry security standards preferred.
-
Familiarity with security standards and frameworks including NIST 800-53, NIST CSF, NIST 800-171, IEC 62443, and/or ISO 27001.
-
Proven experience in cybersecurity, with a focus on cloud environments (AWS, Azure, Google Cloud, etc.).
-
Experience with security tools in a cloud environment.
-
Experience performing Threat, Exploit, and Vulnerability analysis of cloud services and systems
-
Hands-on experience in security systems, including endpoint security, vulnerability management, network security technologies such as firewalls and intrusion detection, authentication systems, log management, and encryption.
-
Experience with governance and risk management for vulnerabilities identified during cyber security testing operations is expected.
-
Proven ability to lead a project from start to finish from the technical side.
-
Capability to clearly communicate information security concepts and risks.
-
Good verbal and written communication skills in English.
-
Demonstrated ability to work as part of a team.
-
Able to reliably complete assignments with limited supervision, and to help lead the actions of others to accomplish complex or extended work assignments.
-
Cybersecurity certifications such as Security+, CISSP, CCNA Security, or GIAC are desirable.
-
Experience working in a global environment across multiple time zones.
-
Must be capable of passing security background clearance investigation.
Please review our benefits here: Life at OSI
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location and date of hire. Please note that the salary information shown above is a general guideline only. Salaries are based upon candidate experience and qualifications, as well as market and business considerations.
NOTICE TO THIRD PARTY AGENCIES
OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.
Equal Opportunity Employer - Disability and Veterans
Know Your Rights
Poster Link:
OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.