Responsibilities

Strategy & Planning

• Participate in the planning and design of enterprise security architecture, under the direction of the Chief Information Security Officer (CISO), where appropriate.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the CISO and Manager, Information Security, where appropriate.
• Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan.

Acquisition & Deployment

• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.

Operational Management

• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Monitor all in-place security solutions for efficient and appropriate operations.
• Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in investigations into problematic activity.
• Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
• Provide on-call support for end users for all in-place security solutions.
• Works effectively as part of a team in resolving security related issues escalated through the Help Desk in a timely manner.  Investigates, tests, solves problems with user’s application access rights.  Provides high level of customer service and appropriate coverage off-hours for critical problems.  Actively participates in the process of identifying service issues with the outsourced Help Desk and recommending solutions.

QUALIFICATIONS/REQUIREMENTS:

 

• Bachelor’s degree, or equivalent technical training,
• Minimum of 7 years of information security experience.
• Strong, demonstrable experience with Networking, Microsoft Server, Active Directory and  Azure AD
• CISSP certification is strongly preferred.
• Minimum 5 years of experience with intrusion detection and prevention technologies
• 3 Years of experience managing Firewalls. SIEMs, MDMs and MFA solutions
• 2 years performing Information security audits
• Experience with conducting penetration testing
• Expertise with network operating systems and software applications necessary to support security administration.
• Knowledge of Microsoft’s recent version of Windows desktop, and Server operating system
• Effective documentation skills are essential.