Posting

Protect systems and data from theft, misuse, breach, and compromise to ensure systems functionality and data remain available and secure. Assist in security incident investigation including incident response and forensics, detecting and responding to threats and compromises. Responsible for cybersecurity tasks to protect and defend information and information systems, compliance and monitoring of systems and applications, and vulnerability management. Provide guidance for configuring and validating security appliances such as firewalls, email filters, proxies, and anti-malware tools.

• Manage and administer cybersecurity technology, including data security and file activity monitoring, email security, vulnerability scanning, web content filters and proxies, IDS/IPS, SIEM and log management, DNS security, data loss prevention, and endpoint protection. Assist with the configuration and monitoring of cybersecurity appliances.
• Lead research, review, and management of cybersecurity events. Assist with planning and management of response to cybersecurity incidents and remediation.
• Collaborate in the development and execution of policies and procedures to ensure information system reliability and accessibility. Assist with developing new security mitigation, monitoring procedures, and strategies.
• Monitor and support security of cloud environments, including identity and access management, logging and telemetry collection, configuration review, and investigation of cloud-based alerts.
• Participate in ongoing cybersecurity training to promote security awareness and improve operational efficiency. Train new personnel, ensuring they are familiar with policy, procedures, standards, and cybersecurity tools.
• Perform security assessments and assist with internal penetration tests to reduce cybersecurity risk. Recommend new security tools to management and provide guidance and expertise in their implementation. Mentor IT and cybersecurity staff and assist with the establishment of best practices.
• Perform other duties as requested.

Knowledge, Skills, and Abilities

• Experience administering enterprise security technologies, including SIEM and log management platforms, endpoint detection and response, email security, data security and file activity monitoring, vulnerability management, and enterprise mobility and device management.
• Hands-on experience securing and monitoring public cloud environments is a plus, with AWS and Microsoft Azure preferred. This includes cloud identity and access management, native logging and monitoring services, and cloud security posture and configuration review.
• Understanding of information security concepts, policies, and procedures.
• Excellent problem solving techniques and listening skills.
• Experience implementing NIST and ISO industry standards.
• Experience handling security incident response.

Education and Experience

• Bachelor's degree in computer science or a related field preferred.
• Three (3) or more years of cybersecurity analysis experience.
• ITIL Foundation certification (at hire or within 12 months in position).
• Intermediate level cloud certification is an important requirement, at hire or within 12 months in position. Acceptable certifications include AWS Certified Solutions Architect Associate, AWS Certified Security Specialty, Microsoft Certified Azure Security Engineer Associate (AZ-500), or Microsoft Certified Azure Administrator Associate (AZ-104).
• Preferred: CISSP, CEH, or Security+ certification.