Cyber Security Engineer III (0019-0040)

Enable and maintain Web Application Firewalls (WAF), tuning rules based on observed patterns. Collaborate with ecommerce product owners and support teams for security coverage in new developments. Ensure accessibility of security event data for SOC, threat, and incident response teams. Implement bot mitigation strategies against malicious bots targeting Staples' websites. Measure and analyze data from security edge controls for effectiveness. Coordinate efforts between vendor-managed SOC and Staples’ internal SOC. Partner with the Online Fraud team to prevent automation-based digital fraud attempts and ATO account take overs. Identify security issues, troubleshoot extensively, and coordinate resolutions using various tools. Handle inbound security-related calls, ensuring excellent customer service. Provide incident resolutions while maintaining uninterrupted customer traffic. Create trouble tickets for minor issues and manage security incident tracking. Classify and label the severity of new incidents during initial assessments. Conduct initial investigations of incidents based on priority, severity, and SLAs. Analyze events to recognize potential attack and fraud attempts, both successful and unsuccessful. Document actions taken by known threat actors and escalate critical incidents to appropriate teams. Develop security policies, protect against unauthorized access, and create custom security configurations. The position is fixed based in the Framingham office; however, telecommuting from a home office may be allowed up to 1 day/week.

40 hours/week, 9:00am-5:00pm

Education and Experience Requirements

Job Requirements:

Requires a Bachelor’s degree in Business Administration, Computer Science, Cybersecurity or a directly related field plus five (5) years of cyber security experience. Experience must include:

Three (3) years of experience in each of the following (experience may be gained concurrently):

- Web Application Security.

- Security Operations and Incident Handling.

- Security Investigation Response and Vulnerability Triage and Forensics (IR).

- Experience with SIEM solutions (Security Information and Event Management).

- Working knowledge of web protocols: OWASP security threat landscape and web security attack vulnerabilities.

- Bot Defense and Mitigation and Web Application Firewall.

- Experience with security tools including Akamai, NuData, Zscaler, Splunk, Microsoft Defender for Endpoint & Cloud Security, Sentinel, Orca, Kount, and FullStory.

- Network Security.

- Reporting, visualization and dashboard creation.

- API security.

- Software architecture and Software Development Lifecycle.

- Web Filtering and Web Proxies.

- On prem and cloud architecture/security.

- Security Controls and Frameworks.

- -Experience with Agile scrum (JIRA).

Two (2) years of experience in each of the following (experience may be gained concurrently):

- Penetration and Vulnerability Testing.

- Project Management.

- Skilled with SOAR toolsets: ServiceNow and Phantom.

One (1) year of experience in each of the following (experience may be gained concurrently):

- Scripting and Automation experience.

Will accept a Master’s degree plus two (2) years of cyber security experience in lieu of a Bachelor’s degree plus five (5) years of experience.

The position is fixed based in the Framingham office; however, telecommuting from a home office may be allowed up to 1 day/week.

Please copy and paste your resume in the email body (do not send attachments, we cannot open them) and email it to candidates at placementservicesusa.com with reference #0019-0040 in the subject line.

Thank you.