Cybersecurity Engineer

**Job#**: 1304985

Job Summary

As the world leader in venue management and services, ASM Global (ASMG) has an extraordinary portfolio of venues, partners, owners, and live event experiences. As our industry rebounds, we are looking to add a Cybersecurity Engineer to our new IT Security & Compliance (ITS&C) team.

As a Cybersecurity Engineer, you will be responsible for working closely with ITS&C leadership to develop ITS&C’s Engineering function, building the capability to deploy and mature new technology services and toolsets in conjunction with global IT, business and 3rd party teams. Working in conjunction with the ITS&C Analyst function as well as with leadership across ITS&C, Infrastructure and IT, you will work to help build and improve ASMG’s cybersecurity footprint, assist in maintaining legal, regulatory & GRC requirements, and be supported by ITS&C in your career path toward future security team leadership or senior engineering roles.

We are looking for an individual who is personable, comfortable working within a growing & supportive environment, and interested in building connections between new and existing platforms to enhance ASM’s cybersecurity Monitoring, Analytics and Response capabilities. This position will play a foundational role in maturing ASMG’s cybersecurity function toward proactive risk management, threat hunting and incident response capabilities.

Key Responsibilities

Evaluate and assist with developing new cybersecurity capabilities, threat hunting tools and data delivery/management
Perform platform and service configuration changes to meet information security requirements
Provide Tier III analytic experience & operational monitoring capabilities as needed to help support Monitoring & Analytics
Perform complex security analysis and triage, suggesting new workflow and playbook development
Design and analyze vendor services and information security requirements, maintaining relationships with key vendors
Identify improvement opportunities for security monitoring
Support incident response and trouble resolution on complex issues
Assist in the development of key reporting and communication methods to executive and venue management teams
Work with outside teams to effectively manage IT security and PCI requirements
Maintain awareness of trends and development opportunities within security regulatory, technology, and operational requirements

**Qualifications**:
To perform this job successfully, the individual must be able to perform essential duties with skill, integrity, and trust, as this position will be a close partner with the head of ITS&C. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and Experience Profile

B.S. in Cybersecurity, Computer Science, System Engineering or equivalent experience
Strong background and orientation with cybersecurity requirements, design and delivery techniques
2-5+ years of experience with system development, integration or engineering of network/data protocols, services and platforms for internal or cloud-based IT environments
Familiarity with Microsoft or similar environments including M365, Azure/Sentinel and Darktrace EIS/Antigena
Preference given to CISSP, CCSP, CNE & related/industry certifications, or willingness to pursue

Desired Skills and Abilities

Strong capability and demonstrable experience with scripting/coding languages and common network tools, such as PowerShell, Python, PHP, Wireshark, PCAP and related technologies
Evident experience with cybersecurity/network engineering design and delivery
Exposure to cybersecurity requirements within IT GRC and Data Privacy frameworks, such as NIST 800-53/171/CSF, PCI-DSS or GDPR
Effective communicator with an ability to translate security analyses into understandable, actionable elements
Excellent analytical skills with a capability for extrapolation and correlation of disparate alerts and network traffic indicators
Willingness to work constructively with Infrastructure and Operations personnel to drive improvements to cybersecurity toolsets and techniques
Solid organization and prioritization skills
Personable approach and ability to work with remote IT venue personnel, contributing to a team environment with professionalism
Strong communication skills, both verbal and written

EEO Employer