SecOps Infrastructure Engineer/Administrator

Job Title:

Location:

Responsibilities:

• Administer and maintain security products (web application firewall, IDS, (h)IPS, EDR, phishing training, vulnerability management, SIEM, etc)

• Conduct routine maintenance for SecOps servers (patching, hardening, upgrades, etc.) and deploy new servers as needed.

• Own Security Operations Infrastructure and interface with other operational teams around the organization.

• Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and associated metrics.

• Conduct routine log review of information security events, investigating and responding as necessary.
• Participate in on-call rotation.

Additional Roles and Responsibilities:

o Maintain a comprehensive understanding of our information systems.

o Work closely with the multiple operation teams to implement and enforce our policy.

o Conduct risk-based evaluation of policy exception requests.

o Monitor for triage and track remediation of vulnerabilities in our systems and networks.

Required Skills:

• Knowledge of endpoint and server operating systems (e.g. Linux, Windows, macOS) and relevant security risks, controls, and vulnerabilities.
• Strong knowledge of networking and network security fundamentals.
• Practical knowledge of enterprise security tools (anti-malware, firewalls, IDS/IPS, email monitoring, two-factor authentication, SIEM, etc.).
• Familiarity with AWS environments and AWS security tools.
• Familiarity with vulnerability management concepts, such as CVE and CVSS.
• Knowledge of and experience with compliance/remediation efforts of relevant domestic and international security standards and best practices such as India DOT requirements, PCI-DSS, GDPR, SOC2, HITRUST, etc.
• Scripting experience, python preferred.
• Infrastructure as code experience preferred.
• Familiarity with cloud computing environments and applications in a security context strongly preferred.
• Ability to quickly change priorities and handle simultaneous tasks.
• Excellent oral and written communications. Education/Pre-requisites:
• 4 or more years of experience in the information security field.
• BS degree in Computer Science, Cyber Security, Information Technology (or related discipline). Graduate degree in Information Assurance (or related discipline) or equivalent formal training and experience in Information Security preferred.
• GIAC or OffSec certifications preferred.