Security Operations Architect

Position: Security Operations Architect

Location: Lincolnshire – onsite 1-3x a month

Duration: 18 months (will make a case to convert/extend for the right candidate)

• Ability to adapt to multiple security environments (Azure, AWS, Google Cloud Platform) – they acquire a lot of companies, so their tech environment is consistently evolving
• Communications skills – will be working with several stakeholders
• Experience delivering solutions (start to finish)

Position Summary:

Our products and customers are our priority, and we''re looking for a self-motivated Security Operations (SecOps) architect who can design and execute security projects that reduce risk to our organization and customers. Our customers trust us with their data, and we are committed to continuously finding innovative ways to ensure that we are transforming, processing, and storing that data securely. The ideal candidate will take a pragmatic approach and contribute to a comprehensive program that reduces the overall threat landscape of the organization.

This role will primarily be responsible for architecting security solutions for our core applications and SaaS platform. The SecOps architect will have demonstrated experience monitoring and securing enterprise applications and cloud infrastructure. This is an exciting opportunity to join a growing organization that truly cares about its people and their personal development.

• Implement, integrate, maintain and retire security products and platforms.
• Identity and access management (IAM).
• Responding to incidents involving malware.
• Responding to network-based attacks.
• Monitoring system events, logfiles and alerts including Security Information and Event Management (SIEM).
• Utilize security orchestration and automated response (SOAR).
• Perform threat hunting.
• Develop metrics to measure malware analysis and detection system performance.
• Perform research into malware development and trends.
• Perform incident response and/or digital forensics on hardware.
• Analyze network security alerts and events.

Requirements:

• CISM, CCSP, CISSP or equivalent advanced certification a plus.
• Demonstrable record of ongoing education and/or certification related to computer science, information security, server platform, or cloud environments.
• 5+ years of experience designing technical security controls for Microsoft Windows, Entra ID and M365 environments.
• 5+ years working on monitoring and protecting production workloads in public clouds including Microsoft Azure, AWS and Google Cloud.
• 2+ years of experience with CI/CD pipelines and deployment automation security.
• Demonstrated experience as technical lead on security tool implementations.
• Demonstrated experience with endpoint management tools for BYOD Microsoft Windows, Apple macOS, and Apple iOS operating systems
• Experience with hardening techniques for server operating systems and cloud architecture.

• Experience with access logging, centralized logging, and monitoring/alerting of security log events via a SIEM platform.
• Experience with applications for monitoring infrastructure security and detecting intrusions through alerts, enrichment, and investigations.
• Experience with application security testing tools such as Burp Suite, OWASP ZAP, etc.
• Working knowledge of incident response, threat modeling, and mitigation.
• Working knowledge of common information security management frameworks such as AICPA’s SOC 2 and NIST’s Cyber Security Framework.
• Experience designing and implementing access control models for privileged access in a fast-paced production environment.
• Knowledge of security best practices such as CIS Benchmarks.
• Strong understanding of common internet protocols such as DNS, SMTP, LDAP, etc.
• Strong understanding of email authentication including SPF, DKIM, DMARC, etc.
• Self-motivated and strong sense of ownership of tasks and personal responsibility.
• Ability to work independently on assigned tasks with strict deadlines.
• Excellent project management skills with a track record of successfully delivering multiple projects on time and within budget.
• Exceptional problem-solving and decision-making abilities.
• Strong communication and interpersonal skills, with the ability to effectively interact with both technical and non-technical stakeholders.
• Commitment to improving literacy and student reading achievement.

Physical Requirements/Work Environment:

• The use of standard office equipment/computers and some light physical work required.
• This position is remote from your home office.
• Occasional travel as needed.