Job Type
Full-time
Description
Martignetti Companies is seeking a hands-on Cyber Security Manager to operate, maintain, and improve the security tools and processes that protect our employees, company systems, data, and business operations. This role will work closely with the Chief Information Officer and IT teams to monitor threats, investigate alerts, resolve vulnerabilities, strengthen cloud and on-premises environments, and respond to security incidents. The ideal candidate is a practical security professional who can troubleshoot technical issues, implement solutions, document procedures, and drive work through completion.
Location- This role does not offer sponsorship nor relocation.
- Taunton, Massachusetts/ Hybrid based on business needs. Remote work may be available to candidates residing in states where the company currently operates, based on business needs and applicable requirements.
Job Responsibilities: - Configure, operate, and maintain security tools across cloud, network, endpoint, identity, email, and application environments.
- Monitor security alerts and system activity; investigate suspicious events and take appropriate containment and remediation actions.
- Perform vulnerability scanning, review findings, prioritize remediation, and work with technical teams to close identified gaps.
- Secure and monitor cloud systems, including cloud infrastructure, software-as-a-service applications, identity platforms, access controls, logging, and configuration settings.
- Administer identity and access security, including privileged access, multifactor authentication, conditional access, account reviews, and access removal.
- Support endpoint protection, email security, network security, data protection, backup security, and security monitoring technologies.
- Respond directly to cyber security incidents by investigating activity, containing threats, collecting evidence, coordinating recovery, and documenting lessons learned.
- Create and maintain technical procedures, security standards, configuration guidance, incident response playbooks, and system documentation.
- Work with Infrastructure, DevOps, Applications, and Service Desk teams to build security requirements into system changes, cloud deployments, and daily operations.
- Support security assessments, audits, third-party reviews, phishing exercises, and employee awareness activities.
- Coordinate with security vendors and managed service providers, validate their findings, and ensure assigned remediation work is completed.
- Track operational security metrics, recurring issues, open risks, and remediation progress; provide concise updates to IT leadership.
- Stay current on relevant threats, vulnerabilities, cloud security practices, and defensive technologies.
- Must be available for occasional night and weekend work as needed for security incidents, maintenance, or critical business needs.
Requirements
- Bachelor's degree in Information Technology, Cyber Security, or a related field preferred; equivalent practical experience may be considered.
- 5+ years of hands-on experience in cyber security, infrastructure security, security operations, or a related technical role.
- Practical experience securing and supporting cloud systems, such as Microsoft Azure, Amazon Web Services, Microsoft 365, or other cloud-based business applications.
- Working knowledge of cloud identity, access controls, privileged access, logging, monitoring, secure configuration, data protection, and shared-responsibility concepts.
- Hands-on experience with endpoint protection, identity and access management, email security, vulnerability management, security monitoring, network security, backup and recovery, and incident response.
- Ability to investigate alerts, analyze logs, troubleshoot security issues, assess vulnerabilities, and implement or coordinate corrective actions.
- Experience creating technical procedures, maintaining security documentation, and following work through remediation and closure.
- Familiarity with common security frameworks and practices such as NIST or CIS Controls.
- Clear written and verbal communication skills, with the ability to explain technical findings and recommended actions to both technical and business audiences.
- Security or cloud certifications such as Security+, GSEC, Microsoft security certifications, AWS security certifications, CISSP, CISM, or similar are preferred.
- Occasional travel may be required.
Compensation & Benefits- Base Salary: $130,000 - $160,000
- Bonus: Eligible to earn up to a 10% Incentive Bonus annually
- Benefits: Comprehensive benefits package including medical, dental, vision, and retirement plans
Physical Demands and Environment- Must be able to lift up to 50 lbs. unassisted.
- Work requires the employee to bend, kneel, crouch, or reach as may be necessary to accomplish tasks
- Work requires considerable mental concentration to effectively execute complex tasks requiring periods of focused mental and visual concentration
- Works in a standard office environment
- Ability to travel occasionally, support planned maintenance or urgent issues after hours or on weekends
- Minimal potential for injury in the performance of duties
NOTE: This job description covers the essentials but isn't exhaustive. Employees may be asked to take on additional tasks or duties to help meet the evolving needs of our organization.
Salary Description
$130,000 - $160,000/year
