Overview
Skills
Job Details
Job Responsibilities
Subject matter expert in incident detection, analysis, and response techniques. Investigate complex security events and escalations.
Design, maintain, and test functionality for major applications.
Monitor and document processes and procedures for the Security Operations Center (SOC).
Collaborate with business units and stakeholders during security incident response.
Ensure regulatory compliance and participate in ongoing skill development.
Making advanced decisions related to risk and security functions.
The role combines leadership, technical expertise, and strategic decision making in information security.
Required Skills
Technical Expertise:
Advanced knowledge of IT infrastructure and cybersecurity components/devices (e.g., firewalls, operating systems, network devices, web proxies, intrusion detection/prevention systems, antivirus systems).
Competence with Linux/Unix or Windows at the command-line level.
Experience with SIEM technologies and Security Operations Center environments.
Analytical Skills:
Information analysis abilities.
Ability to perform independent analysis, identify root causes, and distill relevant findings.
Ability to identify themes and trends from large data sets.
Communication Skills:
Strong oral communication skills.
Analytical writing skills to articulate complex ideas clearly and effectively.
Experience creating and presenting documentation and management reports.
Problem-Solving and Decision Making: Investigative and analytical problem-solving skills.
Ability to manage multiple tasks, priorities, and operational assignments in high-pressure environments.
Leadership and Teamwork:
Strong customer service and decision-making skills.
Ability to support and work effectively in a team environment.
Risk Management:
Solid understanding of IT security and risk management principles.
Ability to apply principles in all aspects of IT security.
Professionalism:
Ability to maintain confidentiality of data.
Courteous and professional demeanor. Initiative, follow-up, and follow-through with commitments.
Education, Experience and Licensing
Experience: Education: Bachelor's degree or equivalent preferred.
Four (4) years of demonstrable experience in information technology security.
Experience in areas such as intrusion monitoring, vulnerability analysis, web application security, incident response, malware analysis, threat research, or intelligence analysis.
Competence with Linux/Unix or Windows at the command-line level is a plus.
Experience with SIEM technologies and SOC environments is desirable.
Certifications Desired: Certified Information Systems Security Professional (CISSP)
Systems Security Certified Professional (SSCP)
Security: Certified Ethical Hacker (CEH)
Other Requirements: Valid and current driver's license.
Ability to maintain confidentiality and display professionalism.