What are the responsibilities and job description for the Lead IT Security Administrator position at R.D. Offutt Company Defunct?
The Lead IT Security Administrator will work as a leader within the Information Security Team and interact closely with other areas of IT, such as Application Development, Networking, Systems Administration, and Analytics, in addition to a variety of business units. This position will be responsible for identifying, planning, and managing enterprise security initiatives to protect the assets of R.D. Offutt Company. This role will require the identification and mitigation of risks by leveraging technology and security tools across the enterprise, as well as contributing to and managing security processes.
Specific Duties Include :
- Lead security projects and initiatives which include facilitating meetings, monitoring progress, and collaborating with team members.
- Research and recommend innovative technologies and approaches to improve the security posture of the enterprise.
- Solve problems using effective approaches by choosing a course of action or developing appropriate solutions; recommend or take action that is consistent with available facts, constraints and probable consequences.
- Assist in architecting business solutions including on-premises and cloud infrastructure.
- Develop, review, and maintain documentation and response plans for security processes involving vulnerability management, SIEM, SOAR, EDR, etc.
- Work collaboratively across a variety of business and technical teams to ensure security measures are integrated into all aspects of the organization’s operations, which may include deploying new technologies, processes, and procedures.
- Stay up to date with the latest security trends, threats, and technology solutions.
- Provide guidance and training to staff on security best practices.
- Assist in developing and driving the strategy on data protection, malware detection, network security, forensics, logging and monitoring, cloud security, identity and access management, and other related domains.
- Establish and monitor KPI’s, incorporating process improvements to increase performance.
- Serve as an escalation point as security incidents are being investigated and responded to and help to review alerts to identify trends and escalating incidents that require higher-level support and interactions from other teams.
- Review current security system definitions for correctness; monitor, report and investigate access to determine coverage for reporting unauthorized access attempts; provide continuous testing of systems for situations requiring corrective action.
- Evaluate and improve MITRE ATT&CK framework coverage and identify controls to address gaps and risks across the enterprise.
- Perform risk assessments and testing of data processing systems.
- Assist in reviewing prospective vendors and their security posture.
- Educate and lead staff on network and information security procedures.
- Expected to perform additional job duties as needed to support our customers and our enterprise.
Job Requirements :
Education :
Preferred :
Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities
Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)