Cyber Security Engineer

NOT Looking for an auditor
Senior Third party risk and controls management Engineer
Contract to hire: 6 months
Rate: $70/hr on W2
Locations: Plano, TX (Last option is Washinton, DC)
Must have : Tech Expertise in Cyber Security, Cloud Security and IAM
Must Have: Cloud

Security, Third Party Risk, Gap analysis and risk assessments, Operational/Data Risk, Application Controls, App Security, App Development with Secure code and Static Code.
• IAM/PAM and Penetration Testing is a huge Plus
Certifications : SANS, Security+ (Plus), CISSP or similar
Hybrid Onsite Schedule : (3) Days flexible
Interview Process:

(2) Rounds


Strong working knowledge of operations practices, risk management processes, principles, architectural requirements and threats and vulnerabilities in the context of Cybersecurity as well as incident response handling methodologies as they apply.
Strong knowledge of national and international laws, regulations, policies and ethics as they relate to Cybersecurity and specifically in the financial industry.
Expert in their field; keeps technical skills current, participates in multiple forums
May be multiskilled across the full range of team functions.
Strong understanding of Agile, with the ability to work under at least one of the common frameworks.
Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities along with the ability to identify systemic security issues.
Provides indepth analysis of vulnerabilities, threats, designs, procedures and architectural design with focus on recommendations for enhancements or remediation with skill in using network analysis tools.
Compliance required for local, country, and/or region specific standards for credentials, certifications and/or training.
Additional Skills:

Cloud security, identify and access management, third party risk management, vulnerability management.
Roles and Responsibilities:

The third party risk and controls management analyst will be responsible for conducting deep dive technical risk reviews of client's highest risk suppliers.
Working across multiple systems of record, this role will identify areas of technical risk to the business by analyzing IT architectures, security controls, evolving industry practices, etc. and document where controls do not exist or need improvement.
These technical deepdive reviews will then been evaluated against technical and business resilience planning, incident response plans, and cyber intelligence reporting.