Position Overview:

The security team is responsible for many areas including vendor due diligence, cybersecurity training, physical access control, vulnerability assessments, and monitoring and alerting for security incidents. There is direct involvement with the various IT teams (infrastructure, helpdesk, Windows, Mac), software development, compliance, legal, and the C-suite.

Responsibilities:

• Administer our SIEM and build alerting rules and playbooks for triage and assessment.
• Compile and collate vulnerability assessment results providing actionable feedback to security, infrastructure, and development teams
• Liaise with internal teams to foster secure deployments of systems and software
• Assist with managing global physical access control system for headquarters and branch office locations.
• Participate and help author training material for the company, both with a security focus (primarily) as well as for general topics.
• Assist keeping various policy documents up to date and adjust as business needs change.
• Tune and manage Microsoft Defender/Security Center, Information Rights Management, and Microsoft Purview

Qualifications:

Strong background as a Linux system administrator

• Understand networking concepts including TCP/IP, firewalls, and routing
• Comfortable working with a terminal or command line on Linux
• Strong written communication skills
• Ability to script with shell/bash, python, PowerShell
• Experience with a SIEM (Splunk, Sumo Logic, LogRhythm, XSOAR/XSIAM)
• Familiar with next-gen firewalls including traffic inspection, application filtering, and monitoring
• Most work takes place 8am to 4pm ET, but some evening and/or weekend work will be required
• There is a periodic on-call support rotation this role will share with the broader IT team