About This Role
This vital role involves safeguarding the organization's digital assets by implementing, monitoring, and enhancing security measures across the IT infrastructure. The position offers an exciting opportunity to work with cutting-edge cybersecurity tools and methodologies in a fast-paced environment committed to continuous improvement and risk mitigation.
Responsibilities
- Monitor network traffic and security alerts using Security Information and Event Management (SIEM) systems to detect potential threats or anomalies
- Conduct vulnerability assessments and vulnerability research to identify weaknesses within the IT infrastructure, including LAN, WAN, cloud environments, and endpoints
- Manage security devices such as firewalls (Cisco ASA), IDS/IPS systems, and endpoint detection and response (EDR) solutions to maintain robust network security
- Perform security risk assessments and investigations following established frameworks like NIST standards and ISO 27002 guidelines to evaluate potential threats
- Implement security controls including encryption, access management (RBAC, SSO), VPNs, PKI, and network segmentation to protect sensitive data and systems
- Assist in incident response activities by analyzing security events, coordinating recovery efforts, and documenting lessons learned for continuous improvement
- Support system hardening initiatives across operating systems including Windows, Linux (Debian, CentOS), macOS, Android, iOS, and virtualization platforms like VMware vSphere
- Collaborate with cross-functional teams on cloud security engineering projects involving platforms such as Google Cloud Platform, Azure, or AWS
- Maintain comprehensive documentation of system security plans (SSPs), compliance reports (FedRAMP), and audit trails to ensure adherence to regulatory requirements like PCI DSS and FISMA
Requirements
- Proven experience in cybersecurity analysis or information security roles within IT infrastructure environments
- Strong knowledge of computer networking concepts including LAN/WAN architecture, routing protocols (OSPF, EIGRP), IPsec VPNs, DNS, DHCP, TCP/IP protocols
- Hands-on experience with cybersecurity tools such as Splunk, Nagios/PRTG for network monitoring; Burp Suite for vulnerability testing; Terraform for cloud infrastructure automation; Nmap for network scanning; Fiddler for web debugging; and New Relic for application performance monitoring
- Familiarity with open-source operating systems like Ubuntu or openSUSE as well as enterprise platforms such as Windows Server Active Directory
- Understanding of security frameworks including ISO 27001/27000 series standards, COBIT governance practices, DIACAP processes, and the Risk Management Framework (RMF)
- Knowledge of threat detection & response techniques using SIEM solutions combined with incident management best practices aligned with ITIL principles