CBTS

The Security Engineer III is responsible for managing technical security controls and communicating vulnerabilities and incidents to operations teams. This role involves performing security assessments, vulnerability scans, and assisting customers with their security needs. | Candidates should have 6 to 7 years of experience in senior IT security roles and a bachelor's degree or equivalent. Relevant certifications such as GIAC/SANS, ISC2, or CompTIA Security+ are preferred. | Security Engineer III Job Purpose: 100% customer-facing position with the mission of managing technical security controls and effectively managing and communicating vulnerabilities, exploits, and incidents to appropriate operations teams while tracking metrics in order to assist the customer in managing risk. The primary purpose is to provide day-to-day management of the client's security infrastructure or day-to-day monitoring, management, and response to security events. Essential Functions: Security Architecture Roles: 65% Perform security assessments or reviews for CBTS customer's enterprise environment. While working with customer technical and executive staff, review the state of various technical and organizational controls processes, and policies. Perform gap analysis, comparing state to widely accepted best practices from vendors, regulatory and compliance bodies, and the security community at large. Document these gaps, along with sensible and relevant recommendations, in findings reports that satisfy the needs of both a technical and non-technical audience. 15% Perform vulnerability scans and penetration tests of CBTS customer environments and controls. Using expertise in the operation of commercial and open-source assessment tools, identify configuration flaws, missing patches, and gaps in defenses that could be exploited by attackers. Assessment types will include social engineering and phishing, wireless, mobile device, and physical security, and web application penetration tests. 15% Assist CBTS customer staff with security needs. Provide recommendations for security architecture, processes, and technologies. Write technical policy, processes, procedures, standards, and other documentation. Perform security research, furthering individual and team understanding of the threat landscape, as well as cutting-edge security technologies. Attend security conferences and participate in local security community events. Evaluate products and tools that can improve the security services team's offerings, and provide value to customers. 5% - Leadership role in cultivating and maintaining the relationship with CBTS customers, vendors, and partners. Security Operations Roles: 60% - Act as technical SME and work all technical escalations from the security operations team including outages and incidents. Lead technical troubleshooting or incident handling events/calls on behalf of the client's security operations team and with the Network, Compute, and Client Operations Teams, internal and external information providers, and others as appropriate. 15% - Lead all aspects of planning, documentation, and process development of CBTS client's global security operations. Drive development of technical procedures and guidelines for implementation and management of Security services as they relate to the global operations team. 10% - Lead technical project efforts for the client's security operations team. 10% - Leadership role in cultivating and maintaining relationships with customers. 5% - Participate in expansion of new opportunities with existing customers as they expand their global security operations requirements. Experience: 6 to 7 years of experience in Senior level roles as IT Security Architect, IT Security Engineer, IT Security Auditor, Cyber-Security Analyst or Cyber-Intelligence Analyst. Education: Four years of College resulting in a Bachelor's Degree or equivalent. Certifications, Accreditations, Licenses: One or more of the following certifications dependent on the actual role: GIAC/SANS certifications - GCIH, GCIA, GCFE, GCFA, GREM, GSEC ISC2 – CC, SSCP, CCSP, CISSP CompTIA Security+, Akamai Security, Microsoft, Linux technical certifications Key Responsibilities: Configure and manage Akamai security solutions, including Kona Site Defender, Web Application Firewall (WAF), Bot Manager, Client-Side Script Protector, and Account Protector, to mitigate threats, secure payment transactions, and ensure compliance with PCI DSS. Deploy and maintain Akamai Account Protector to defend against fraud-based threat actors. This includes account takeover (ATO) and fraudulent account enrollment protection mechanisms. Configure and operate Akamai Account Protector to provide real-time detection and mitigation of fraudulent login attempts, ensuring secure access to user accounts. Implement and optimize Akamai Content Delivery Network (CDN) for secure, high-performance web traffic delivery. Develop fine-tune rules and policies in Account Protector to adapt to new and emerging threats related to account takeover attempts and credential abuse. Manage Akamai’s SSL/TLS certificates to ensure encrypted and secure data transmission. Maintain the operational integrity of Akamai configurations across the organization, ensuring maximum uptime, performance, and security. Oversee the day-to-day operations of Akamai solutions, including monitoring, troubleshooting, and resolving incidents related to web security and performance. Ensure high availability and scalability of Akamai services, including participation in capacity planning and performance tuning. Conduct regular risk assessments, security reviews, and compliance checks to ensure ongoing adherence to PCI DSS standards. Collaborate with development and security teams to integrate Akamai Account Protector into existing login flows and enhance user security. Collaborate with cross-functional teams (IT, DevOps, Security, Compliance) to implement and monitor secure Akamai configurations aligned with PCI DSS requirements. Develop and implement automation scripts (e.g., in Python, Shell) to streamline operational tasks and ensure timely updates to Akamai configurations, patches, and security policies. Configure real-time monitoring for Akamai services to detect and respond to potential threats or performance issues. Maintain regular reporting on PCI DSS compliance status, Akamai configuration changes, and incident resolutions. Provide expertise in handling security incidents, troubleshooting Akamai-related configuration issues, and remediating vulnerabilities impacting PCI DSS compliance. Develop and maintain comprehensive documentation, including configuration guides, operational procedures, and PCI DSS compliance documentation. Assist with internal and external PCI DSS audits by providing detailed reports on Akamai configurations, security controls, and operational processes. Special Knowledge, Skills, and Abilities: Experience with Akamai Account Protector or similar solutions for securing user accounts from fraud, credential stuffing, and account takeover attempts. Strong understanding of PCI DSS requirements and proven experience implementing and maintaining compliance within large-scale web environments. Strong auditing, assessment, and enterprise security architecture development skills should be a key focus in career history. Experience with technical training and instruction. Experience with public speaking and presentation on technical topics. Enterprise IT security architecture experience in a broad range of disciplines including networking, systems, applications, and cloud computing environments. Experience with enterprise host protection systems, enterprise vulnerability management, network security tools such IPS/IDS, and/or experience with attack tactics, techniques, and procedures used by the APT, Cyber Crime, and other associated threat groups. Excellent verbal and written communications skills. Dependent on position, strong demonstrated skills in multiple enterprise-level OS environments including Microsoft Windows, Linux, and Unix. Strong understanding of network communications (TCP/IP, Ethernet, WAN/LAN technologies) Exceptional research and analysis experience, Risk assessment experience, Auditing experience or CIRT experience. Knowledge of information security threat types, their composition, and IOCs Dynamic Malware Analysis Experience. Knowledge of attacker tactics, techniques, and procedures (TTPs) used by the APT, Cyber Crime and other associated threat groups. Knowledge of computer security incident investigation and response. Experience analyzing common types of attacks, cybercrime, APT, etc... Experience with Splunk or similar Log analysis tools and experience reviewing security events. Experience reviewing, analyzing, and providing reporting on ongoing Intel gathering from various classified, sensitive, as well as open-source intelligence sources. Deep internal knowledge of the MS Windows operating system, file system, registry, processes, and communications as well as collection and analysis techniques. Knowledge of intrusion analysis, network, and host forensics. Scripting experience is a plus (Python, Perl, Ruby, etc.). Working knowledge and experience with standard security solutions and architectures. Experience in Securing Windows, Unix, and Linux environments. Experience in securing J2EE Application (Weblogic, JBOSS) and Web Server (SunOne, Apache) platforms. Experience in securing distributed applications. Experience with encryption technologies. Experience in secure network configurations. Additional working knowledge (understanding) with Crowdstrike, Proofpoint or DTEX a plus. ITSM - Incident / Problem / Change / Request Management experience (ServiceNow preferred) Excellent problem-solving skills and the ability to identify, troubleshoot, and resolve complex configuration or security challenges. Strong interpersonal skills with the ability to work effectively with cross-functional teams, including IT, DevOps, Security, and Compliance. Strong organizational skills and attention to detail. Solid communication skills (leading, influencing experience), verbal and written, including documentation (design and training), and the coaching of other resources. Supervisory Responsibilities: No Supervisory Responsibility Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.

The Security Engineer II is responsible for managing the security infrastructure and responding to security events. This role involves collaborating with various teams to ensure the effectiveness of security measures and policies. | Candidates should have 3 to 5 years of experience in security engineering roles and an associate degree or equivalent education. Relevant certifications in cybersecurity are also required. | Security Engineer II Job Purpose: 100% customer-facing position with the mission of managing technical security controls and effectively managing and communicating vulnerabilities, exploits, and incidents within appropriate operations teams while striving for internal service levels resulting and managing customer risk. The primary purpose is to provide day-to-day operation support of the client's security infrastructure or day-to-day monitoring, management, and response to security events. Essential Functions: 75% - Perform day-to-day management of the security infrastructure within their area of expertise and/or Perform incident/event/detection response and analysis of security events in the enterprise. 10% - Participate and/or ownership of project improvement efforts including infrastructure upgrades, automation development, implementation/testing of new systems. Processes, or techniques, documentations, etc. directly related to the team's goals and effectiveness. 10% - Interact routinely with technology team leadership (i.e. senior security engineer and/or Team Lead). 5% - Assist with the documentation of procedures for security infrastructure within their area of expertise. Experience: 3 to 5 years of experience Senior-level roles as IT Security Engineer Cyber-Security Analyst, Cyber-Intelligence Analyst Security Systems Engineer Security Analyst. Education: Two years of College or Technical School resulting in an Associate's Degree or equivalent. Certifications, Accreditations, Licenses: One or more of the following certifications dependent on the actual role: GIAC/SANS certifications - GCIH, GCIA, GCFE, GCFA, GREM, GSEC ISC2 – CC, SSCP, CCSP, CISSP CompTIA Security+, Akamai Security, Microsoft, Linux technical certifications Key Responsibilities: Oversee the deployment, configuration and ongoing management of the Insider Threat and Endpoint DLP solutions. Ensure platform scalability, performance optimization and high availability across the enterprise. Support and assist insider threat team with gaps identified while investigations by analyzing alerts and logs generated by the Insider Threat and Endpoint DLP solutions. Support and assist with policy development & refinement for rulesets. Customize configurations based on evolving organizational needs and threat landscapes. Work closely with the Digital Technology, Cyber Defense Operations, and Compliance teams to align the platform’s capabilities with business and regulatory requirements. Provide technical leadership and mentorship to junior team members. Integrate platform solutions with other Cybersecurity tools such as SIEM, SOAR and EDR/XDR platforms. Monitor platform health and proactively address potential issues. Generate and present detailed health reports & platform performance metrics to stakeholders Automate repetitive tasks to enhance efficiency and streamline operations. Collaborate with stakeholders to understand business requirements and design Proofpoint email security solution. This includes configuring email security policies, threat intelligence, and data loss prevention (DLP) rules. Manage and maintain the Proofpoint environment, including system upgrades, patching, and policy tuning. Monitor system health, performance, and availability to ensure optimal operation. Troubleshoot and resolve any issues that arise. Play a key role in incident response activities related to email security incidents. Investigate and analyze security events, identify root causes, and implement preventive measures to mitigate future threats. Develop and enforce email security policies, rules, and filters to protect against spam, malware, phishing, and other email-borne threats. Continuously assess and refine policies based on evolving threat landscapes and business requirements. Stay up to date with the latest email security threats, vulnerabilities, and industry best practices. Conduct research and analysis to proactively identify emerging threats and propose appropriate mitigation strategies. Maintain accurate documentation of the Proofpoint environment, configuration settings, and procedures. Prepare regular reports on system performance, security incidents, and mitigation efforts for management and stakeholders. Engage with Proofpoint support and product teams to escalate and resolve technical issues, coordinate product updates, and provide feedback on product enhancements and feature requests. Special Knowledge, Skills, and Abilities: Must be a team player. Experience with one or more enterprise host protection systems, enterprise vulnerability management, network security tools such IPS/IDS, and/or experience with attack tactics, techniques, and procedures used by the APT, Cyber Crime, and other associated threat groups. Expertise in endpoint security, data loss prevention and insider threat management. Deep understanding of networking concepts, endpoint security and threat detection techniques. Strong knowledge of SaaS solutions and cloud-native security architectures. Proficient in integrating security platforms with other Cyber security applications. Extensive experience in designing, deploying, and managing Proofpoint email security solutions. Strong knowledge of email security protocols and standards (e.g., SMTP, SPF, DKIM, DMARC) and email authentication mechanisms. Proficiency in configuring and managing Proofpoint products, including Email Gateway, TAP, ATP, and Encryption solutions. In-depth understanding of email security threats, including phishing attacks, spam, malware, and data exfiltration techniques. Familiarity with email security-related regulations and compliance standards (e.g., GDPR, HIPAA). Strong demonstrated skills in one or more enterprise-level OS environments including Microsoft Windows, Linux, or Unix. Understanding of network communications (TCP/IP, Ethernet, WAN/LAN technologies). Previous CIRT experience with a targeted (APT) and crimeware threat program. Knowledge of information security threat types, their composition, and IOCs Dynamic Malware Analysis Experience. Knowledge of attacker tactics, techniques, and procedures (TTPs) used by the APT, Cyber Crime and other associated threat groups. Knowledge of computer security incident investigation and response. Experience analyzing common types of attacks, cybercrime, APT, etc... Experience with Splunk or similar Log analysis tools and experience reviewing security events. Experience reviewing, analyzing, and providing reporting on ongoing Intel gathering from various classified, sensitive, as well as open-source intelligence sources. Deep internal knowledge of the MS Windows operating system, file system, registry, processes, and communications as well as collection and analysis techniques. Knowledge of intrusion analysis, network, and host forensics. Scripting experience is a plus (Python, Perl, Ruby, etc.). Additional working knowledge (understanding) with Akamai WAF, AWS Security or Crowdstrike a plus. ITSM - Incident / Problem / Change / Request Management experience (ServiceNow preferred) Excellent problem-solving skills and the ability to identify, troubleshoot, and resolve complex configuration or security challenges. Strong interpersonal skills with the ability to work effectively with cross-functional teams, including IT, DevOps, Security, and Compliance. Strong organizational skills and attention to detail. Ability to work independently and manage multiple priorities and projects simultaneously in a fast-paced environment with changing priorities. Good verbal and written communication skills. Supervisory Responsibilities: No Supervisory Responsibility Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.

Drive IT professional services sales by building customer relationships, maintaining a pipeline of staffing/project opportunities, and collaborating with recruiters and account managers. | 3-6 years of experience in IT professional services sales with a bachelor's degree or equivalent and strong consultative selling and business skills. | Professional Services Executive CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com. Job Purpose: This position reports to the Director – Professional Services Sales and is responsible for driving IT professional services, namely project-based consulting work. This position interacts with and provides resources to all levels of customers and possible internal managers. This individual will work closely with the Account Managers from other areas of CBTS and CBT to develop customer relationships and work in conjunction with other CBTS and CBT IT solutions. The position is responsible for identifying, qualifying, and closing key staffing opportunities. Essential Functions • Build strategies and relationships to drive revenues and gross profits within strategic accounts, maintain a high activity level in accounts - 30% • Establish and maintain a pipeline of staffing and project-based opportunities - 20% • Maintain regular contact with customers and key decision-makers via regular client meetings and lunches - 20% • Work with CBTS recruiters to screen and qualify candidates via in-house interviews - 5% • Cold Calling new and potential accounts - 10% • Provide accurate forecasts and feedback to sales management and recruiters regarding candidate submissions and client interaction - 10% • Attend and participate in client and candidate relationship building events - 5% Education · Four years of College resulting in a Bachelor's Degree or equivalent Certifications, Accreditations, Licenses · N/A Experience · 3-6 Years Special Knowledge, Skills, and Abilities • Consultative Selling • Qualifying Sales Process Planning • Customer Knowledge • Product Knowledge • Self-Management • Business Acumen • Innovation • Competitive Knowledge • Resource Leadership • Resource Management Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information. The pay range for this role is: 134,000.00 - 145,000.00 USD per year (Hybrid (Atlanta, Georgia, US))

Lead AWS IAM team to develop and support IAM resources, enforce least privilege policies, ensure security compliance, and drive operational efficiencies in a large enterprise environment. | 5+ years AWS development experience with strong IAM security expertise, AWS certifications, DevOps and Infrastructure as Code skills, and excellent communication and organizational abilities. | Description: • Provides technical leadership for AWS IAM team responsible for the development and support of AWS IAM resources including users, groups, roles, and policies. • Leads and actively participates in the interpretation and implementation of AWS IAM access policies and procedures for our customer. • Maintains a high performing team by providing thought leadership for complex projects and issues ensuring business needs are accomplished. • Drives operational efficiencies and process improvement in the development and implementation of AWS IAM access policies in a large enterprise environment. • Actively participates in the day-to-day delivery of AWS IAM Operations and is in regular communication with the customer. • Ensures the principle of least privilege is implemented in every AWS IAM policy. • Ensures the developed solutions follow corporate IAM security policies/standards and regulatory requirements while enforcing the principle of least privilege. • Ensures security controls are implemented in the Cloud Formation templates as required to ensure we maintain a secured Cloud IAM posture. • Develops high understanding of customer perspective and requirements and formulates a plan to meet those. • Manages or coordinates team changes, incidents, and outages to restore service and minimize impact to IAM services. • Follows established process documentation to ensure proper governance and request to implementation traceability is in place. • Acts as a thought leader for the team and builds team empowerment through coaching. Requirements: • 5+ years’ experience in AWS development with a thorough understanding of Attribute Based Access Controls. • Strong technical experience in the development and implementation of AWS IAM enterprise security solutions. • Experience in large enterprise implementation, strategic planning, business acumen, and change management. • Ability to develop processes and procedures for supporting and implementing complex, enterprise solutions. • Excellent analytical ability and problem-solving skills. • Strong experience in DevOps / Infrastructure As Code / Policy As Code via CI/CD pipeline. • Strong experience in Cloud Formation Templates & Stacksets / Git / BitBucket. • Working knowledge of JIRA and Service Now. • Strong organizational skills. • Excellent verbal and written communications skills. • Minimum certification: AWS Solution Architect Assoc or AWS Developer Assoc. • Preferred candidates possess: AWS Certified Security – Specialty. • Note: Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information. Benefits:

Lead AWS IAM team to implement and maintain secure IAM policies and procedures, ensuring least privilege and compliance in a large enterprise environment. | 5+ years AWS development with strong AWS IAM security experience, certifications (AWS Solution Architect or Developer Associate minimum), DevOps and Infrastructure as Code expertise, and leadership skills. | AWS IAM Engineer – Technical Lead Job Description: Provides technical leadership for AWS IAM team responsible for the development and support of AWS IAM resources including users, groups, roles, and policies. Leads and actively participates in the interpretation and implementation of AWS IAM access policies and procedures for our customer. Maintains a high performing team by providing thought leadership for complex projects and issues ensuring business needs are accomplished. Responsibilities: • This is a highly visible, customer-facing leadership role, providing technical leadership for team of engineers responsible for timely implementation of AWS IAM access policies and procedures. • Drives operational efficiencies and process improvement in the development and implementation of AWS IAM access policies in a large enterprise environment. • Actively participates in the day-to-day delivery of AWS IAM Operations and is in regular communication with the customer. • Ensures the principle of least privilege is implemented in every AWS IAM policy. • Ensures the developed solutions follow corporate IAM security policies/standards and regulatory requirements while enforcing the principle of least privilege. • Ensures security controls are implemented in the Cloud Formation templates as required to ensure we maintain a secured Cloud IAM posture. • Develops high understanding of customer perspective and requirements and formulates a plan to meet those. • Manages or coordinates team changes, incidents, and outages to restore service and minimize impact to IAM services. • Ensures security controls are implemented in the Cloud Formation templates as required to ensure we maintain a secured Cloud IAM posture. • Follows established process documentation to ensure proper governance and request to implementation traceability is in place. • Acts as a thought leader for the team and builds team empowerment through coaching. Qualifications • 5+ years’ experience in AWS development with a thorough understanding of Attribute Based Access Controls. • Strong technical experience in the development and implementation of AWS IAM enterprise security solutions. • Experience in large enterprise implementation, strategic planning, business acumen, and change management. • Ability to develop processes and procedures for supporting and implementing complex, enterprise solutions. • Excellent analytical ability and problem-solving skills. • Strong experience in DevOps / Infrastructure As Code / Policy As Code via CI/CD pipeline • Strong experience in Cloud Formation Templates & Stacksets / Git / BitBucket • Working knowledge of JIRA and Service Now • Strong organizational skills • Excellent verbal and written communications skills Accreditation / Certification / Licenses: • Minimum certification: AWS Solution Architect Assoc or AWS Developer Assoc • Preferred candidates possess: AWS Certified Security – Specialty Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.