Bachelor's Degree in Computer Science or Engineering or equivalent experience
Experience in coding or scripting (e.g. Python, Perl, PowerShell)
Proven ability to create Regular Expressions
Familiarity with RESTful APIs and automation processes
1 year of operational experience with Symantec and/or McAfee DLP
Strong communication skills for technical and non-technical audiences
Ability to work independently and as part of a team
Excellent organizational and time management abilities
Responsibilities
Utilize Endpoint Detection and Response (EDR) software for security
Implement Data Loss Prevention (DLP) software for hosts and networks
Manage email encryption solutions to secure communication
Deploy anti-malware and antivirus software effectively
Conduct incident analysis and troubleshooting from security applications
Create and tune security rules and policies as per stakeholder needs
Perform Level 2 & 3 triage and handling of escalated security events
Evaluate and design new security technologies and products
Update documentation for security systems and processes
Enhance Threat Intelligence program through automation and integration
Benefits
Dynamic team environment
Professional development opportunities
Exposure to leading-edge security technologies
Support for continuing education and certifications
Full Job Description
Job Description
Responsibilities
Endpoint Detection and Response (EDR) software
Host and Network based Data Loss Prevention (DLP) software
Email encryption software
Anti-malware/Anti-virus software
Other security applications
Conduct analysis, troubleshooting, and trending of incidents/events detected from Endpoint security solutions, DLP, and other security applications
Manage various deployed DLP technologies and their integration points with Configuration Management Database (CMDB), Email infrastructure, LDAP (e.g. Active Directory), etc.
Create custom rules and tune existing rules, policies, alerts, etc. within various security applications based on stakeholder needs or situational conditions
Conduct ongoing Threat Hunting exercises using existing security applications
Perform Level 2 & 3 triage and handling of security events (escalated from Level 1 Security Analysts or other); includes but is not limited to identification, containment, remediation, and reporting activities.
Create new and enhance existing procedures to improve operational efficiencies and reporting accuracy
Develop detailed technical recommendations to solve current and future security issues; identify protection gaps and propose effective mitigating solutions
Maintain awareness of emerging threats to data protection, system integrity, and network availability
Evaluate, design, architect, implement, and configure new security products and technologies
Develop, review, and maintain documentation for security systems and procedures
Expand Threat Intelligence program through integration, automation, and enhanced workflows
Analyze, evaluate, and communicate Threat Intelligence notifications to reduce risk exposures and to defend against cyber attacks
Qualifications
Must Haves:
A Bachelor's Degree in Computer Science or Engineering or equivalent experience
Proven experience with creating Regular Expressions
Experience with RESTful APIs and automation
1 Year of Symantec and/or McAfee DLP operational experience is required; must have implemented and managed DLP; must possess strong technical knowledge of DLP architecture, system policies, rules, etc.
Strong verbal and written communications skills; must be able to effectively communicate technical details and thoughts in non-technical/general terminology to various levels of management
Work well in team environments with internal and external resources as well as work independently on tasks
Strong organizational, multi-tasking, and time management skills
Additional Information
Preferred/ Nice-to-haves:
CISSP, CISA, CEH, OSCP, or other industry recognized security certification(s)
Next Generation Anti Malware implementation and/or management experience
1 Year of Threat Intelligence administration experience; have used or implemented the above program in some capacity, understanding incident response, analysis, rules, etc.
