Offensive Security Engineer

Company Description

At Brightspeed, we are reimagining how people live, work, play and connect by providing fast, reliable internet connections and an awesome customer experience in twenty states throughout the Midwest and South.

Backed by funds managed by Apollo Global Management, our vision is to accelerate the upgrade of copper to fiber optic technologies, bringing faster and more reliable internet service to many rural markets traditionally underserved by broadband providers, while delivering best-in-class customer experience.  

Be a part of the team that will make this vision a reality….designing and building a world class fiber network and creating a customer experience second to none.

Check us out on the web!  

Job Description

We are currently looking for an Offensive Security Engineer to join our growing team! Reporting directly to the Security Operations Center (SOC) Manager, you will assist with the formal development and execution of testing on computer systems. You will be responsible for helping assess the security of the systems within Brightspeed. In addition, the individual will assist the SOC analysts during incident triage and handling when needed (internal, customer-facing, Telcom, etc.). In this position, you will be part of a critical team on-call 24x7 to manage critical incidents. This position requires an individual that can handle multiple priorities and business risks.

The Security Operations Center (SOC) Team is responsible for protecting the entire company. The team is augmented by an MSP (Managed Service Provider) vSOC (virtual SOC) team that will monitor all networks 24 x 7. The vSOC provides tier 1 monitoring and incident response. This SOC team will work directly with the vSOC and will provide next-level support in all aspects of security operations, including but not limited to incident response and threat hunting. In addition, the SOC team combines people, processes, and tools to continuously monitor and improve Brightspeed's security posture while detecting, analyzing, and responding to cyber security incidents.

You will be required to have a strong background and understanding of all cyber security domains and works in the Protect, Detect, and Respond areas of the NIST CSF Framework. You will make vital cyber security decisions using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also on a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving the organization along the maturity curve.

We are looking for someone passionate about cyber security to work alongside a talented team to enable Brightspeed's best-in-class cyber security organization.

All Enterprise Cyber Security organization team members also perform any other duties assigned.

As Offensive Security Engineer, your duties and responsibilities will include:

• Conduct formal testing of Brightspeed computer systems, their software, and hardware security controls
• The ability to develop advanced, formal reports of campaigns for leadership
• Conduct security audits and legal cyberattack simulations by designing and utilizing hacking tools to access designated pieces of data during a predetermined time frame
• Generate tools for breaking into security systems
• Detect and correct system weaknesses
• Provide recommendations based on an assessment
• Implement solutions to enhance data security
• Assist in the development of detection and preventative controls
• Support the SOC as necessary during 24x7 on-call
• Mentors and identifies training needs for newer Analysts and Engineers to improve the capabilities and maturity of the SOC
• Collaborates with other teams on security research and intelligence gathering
• Use SIEM, SOAR, DLP tools, Cloud Posture Management, Endpoint Management, Endpoint Protection Systems (EDR/XDR), and other security tools to support a strong and healthy SOC
• Participates in organizational projects, as required
• Ticket Management
• Case Management
• Drive and monitor program metrics

Qualifications

WHAT IT TAKES TO CATCH OUR EYE:

• Associate’s degree in computer science, Information Systems, Engineering, Technology, or related field or equivalent experience/training
• 5 years of SOC/Penetration Testing experience
• 5 years of Information Technology related experience
• Experience managing cases/incidents
• Robust creativity and problem-solving skills
• Ability to think analytically
• Knowledge of technical systems and terminology
• Ability to identify and exploit vulnerabilities
• Advanced written and verbal communication skills

BONUS POINTS FOR:

• Bachelor’s degree in computer science, Information Systems, Engineering, Technology, or related field or equivalent experience/training
• Information Security Certifications preferred:
  • CEH
  • GPEN
  • CPT
  • CEPT
  • OSCP
• Python or PowerShell scripting
• A solid understanding of networking, cyber security concepts, vulnerability identification, and cyber threat intelligence is necessary
• Excellent communications skills that include the ability to provide formal documentation of analysis and research results to include briefings, reports, writing, training of lower-level team members, and editing at a technical/professional level
• Aptitude in solving problems independently
• Demonstrated problem-solving skills
• Sound decision-making ability
• Must be detail-oriented, well organized, thrive in a sense-of-urgency environment, leverage best practices, and most importantly, innovate through any problem with a can-do attitude
• Strong analytical and time management skills

#LI-SS1

Additional Information

WHY JOIN US?

We aspire to contemporary ways of working.

Recognized as a Top Workplace by the Charlotte Observer, Brightspeed HQ is located on the 7th floor of the new Vantage South End - East Tower in Charlotte, NC. We prioritize hiring talent in the Charlotte area, whenever possible, to make it a truly vibrant destination for our hybrid workforce. At Brightspeed, we have roles that are designated as remote, hybrid, office or field-based, depending on the position, business needs and individual circumstances. We also invest in technology that enables our entire team to stay connected. Why? Because Brightspeed recognizes the value of finding the best talent for the job, wherever they may be.

We offer competitive compensation and comprehensive benefits.

Our benefits and paid time off programs reflect our underlying belief in promoting overall wellness through physical, emotional and financial health. Brightspeed offers a comprehensive benefit program, including competitive medical, dental, vision, and life insurance; an employee assistance program; a 401K plan with company match and a host of voluntary benefits. 

Diversity, equity and inclusion are at the center of our grounding belief in Being Real. 

When we bring our authentic selves to work, everyone is better as a result. A diverse team helps us be fierce advocates for more accessible, inclusive and high-quality internet, because we believe doing so promotes equity in the communities we serve.

Brightspeed is an Equal Opportunity Employer/Veterans/Disabled

For all applicants, please take a moment to review our Privacy Notices:  

• Brightspeed’s Privacy Notice for California Residents
• Brightspeed’s Privacy Notice