Full Time Opportunity

General Description

The Threat Intelligence Cyber Security Engineer will work closely with in-house software development teams, Information Technology teams, and other business units, along with vendors/third-party organizations to ensure that Security testing and Threat modeling assessments are included in the workflow and performed as required per documented Standards. In addition, this role will work with the internal Threat Intel unit and other Cyber Security units to define project plans, implement, and operationalize Red team activities with in-house staff, and improve the current Threat Intelligence Program. This role will be expected to maintain industry and cyber knowledge to optimize and align Popular’s Security testing and Threat Intelligence processes and systems.

Essential Duties and Responsibilities

• Develop, implement, and operationalize the ability to run penetration testing activities with internal tools and internal staff.
• Perform penetration testing to identify and address vulnerabilities in systems, networks, and applications.
• Participate the oversight of external security testing vendors to perform penetration testing that is not performed in-house.
• Analyze to improve the current Threat Modeling process, implementing identified gaps.
• Collaborate with cross-functional teams to integrate threat modeling into development processes.
• Conduct threat modeling exercises to identify potential vulnerabilities and weaknesses.
• Proactively search for signs of malicious activities within the organization’s network and systems.
• Develop and implement processes to effectively operationalize threat intelligence duties.
• Integrate threat intelligence into security operations for real-time response.
• Streamline incident response procedures based on threat intelligence insights.
• Analyze threat intelligence feeds and incorporate findings into security strategies.
• Manage and respond to security requests reported through ticketing systems.

Education

Bachelor’s Degree in Computer Science or related fields

Experience

Three (3) years of relevant experience in threat intelligence, penetration testing, threat modeling.

Certifications and Licenses

Certifications are highly desirable but not required.

• Security+
• CompTIA CySA+
• CompTIA PenTest+
• CEH
• CTIA
• CISM
• CISSP
• CCSP

Knowledge, Skills and Abilities

• Strong business acumen: ability to understand the needs and concerns of business stakeholders and colleagues and respond promptly and effectively to stakeholder requests. Ability to conduct analysis on work procedures, business results and recommends changes to improve the effectiveness of the business’s management.
• Strong technical acumen: knowledge of Information Security and Information Technology concepts. Ability to write technical instructions using programs and technology. Robust knowledge of applicable local and federal laws, regulations, and guidelines.
• Communication skills: effectively interact with internal and external stakeholders. Ability to foster trusting relationships with colleagues and clients. Highly develop written and verbal communications skills, strong ability to communicate ideas (storytelling). Presents numerical data effectively. Superior communication and interpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations, summaries, and reports for all audiences.
• Analytical skills: Stays focused on main issues, prevents irrelevant issues or distractions from interfering with timely completion of assignments. Collects, research and complements data; Synthesizes complex or diverse information. Demonstrates attention to detail; Applies design principles; Generate creative solutions. Strong quantitative, research and analytical skills. Experience with data analysis, persuasive and informative writing, workload management, and process management.
• Problem Solving: Identifies and resolves problems in a timely manner; Develops alternative solutions. 
• Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change. Knowledge on project coordination, identification of business needs, work plan, budget control, time management, resource allocation, team management and status reports. Must demonstrate leadership, logic, and reasoning skills.
• Operational/Regulations Processes: Knowledge on budget administration, resources allocation, organization’s policies, and regulations. Ability to establish, conduct and track operational processes properly.
• Computer and Technological Skills: Proficient in MS Office 365. Experience with data management tools such as Power Pivot, Power BI, among others is desired. Ability to achieve results by providing innovative ways of working with operational and technological considerations. Knowledge of computer flow charts and programming logic and codes.

Region Locations

Puerto Rico or US.

Work Schedule

Hybrid or Remote.

Values

Additional Requirements

The information provided here is only a general guide as to the nature of the position and does not constitute an exact description of the goals, tasks, duties, and responsibilities of the position. The specific details of each position are described in the employee’s objectives within the performance evaluation.