The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.
Manage and configure network security appliances and infrastructure across datacenters.
Develop and maintain incident response plans and playbooks.
Collaborating across IT, operations, and engineering teams to ensure secure architectures, required.
Identify and remediate vulnerabilities across enterprise systems.
Lead, mentor, and guide cybersecurity and network security teams.
Administer and optimize Cisco ISE, SIEM, IDS/IPS, NDR, and related systems.
Manage DLP, browser isolation, and other web security solutions.
Designing and implementing secure network architectures, required.
Collaborate across IT and operations teams on secure implementations and incident escalations.
Define and enforce cybersecurity policies, standards, and procedures.
Review and approve new technologies from a security perspective.
Design and maintain secure network architectures across on-premise, cloud, and hybrid environments.
Implement segmentation and isolation strategies to reduce lateral movement risks.
Research emerging threats and technologies to continually strengthen enterprise defenses.
Requirements
ssl/tls
siem
ids/ips
cissp
cloud security
leadership
Managing technical cybersecurity and network security teams, preferred.
Strong background in SSL/TLS certificate lifecycle management, decryption, and inspection, required.
Bachelor's Degree Cybersecurity, Computer Engineering, Computer Science, Information Systems Security, Information Technology and 5 years in Information security or Network Security in a lead or senior technical role and experience in CIRT, SOC, or Incident Management and hands-on experience with SIEM, IDS/IPS, NDR, and firewall technologies. Someone with knowledge of network architecture, microsegmentation, and vulnerability remediation. Familiarity with cloud security and OT systems (SCADA, PLC) preferred.
3+ years in cybersecurity or network architecture roles, required.
Familiarity with OT systems (SCADA, PLCs) and industrial protocols (DNP3, Modbus), preferred.
Hands-on work with IDS/IPS, next-generation firewalls, NDR systems, and SIEM tools (Splunk),required.
Bachelor's Degree and with 5 years of relevant experience IT or Information security or
Managing vulnerability remediation and control verification, preferred.
Ability to push, pull, and lift up to 25 pounds
Demonstrated problem solving skills
Strong background in technology evaluation and risk assessments, preferred.
Master's Degree Cybersecurity, Computer Engineering, Computer Science, Information Systems Security, Information Technology and 3 years in Information security or Network Security in a lead or senior technical role and experience in CIRT, SOC, or Incident Management and hands-on experience with SIEM, IDS/IPS, NDR, and firewall technologies. Someone with knowledge of network architecture, microsegmentation, and vulnerability remediation. Familiarity with cloud security and OT systems (SCADA, PLC) preferred.
Proficiency with Zeek, Suricata, SNORT, YARA, and STIX/TAXII, preferred.
Associate's Degree and with 6 years of relevant experience IT or Information security or
Cloud networking and hybrid environment security experience, required.
High School Diploma/GED and with 8 years of relevant experience IT or Information security.
Experience with Conducting forensic analysis and incident response using PCAP and log data, required.
Handson experience deploying and maintaining physical and virtual network devices in data centers, required.
Experience leading enterprise-scale security transformation projects, preferred.
Experience with hybrid infrastructures including data centers, cloud, and remote access environments, required.
Master's Degree and with 3 years of relevant experience IT or Information security or