Position Summary: Primarily focused on the day-to-day operations and validation of processes already in place with a global support mindset. Monitor internal and external access controls, security safeguards and associated processes to protect the confidentiality, integrity and availability of PRA information systems assets. Evaluate new technologies and applications, assess vulnerabilities and risks, detect and respond to incidents, and recommend appropriate safeguards. Route IS support tickets and documents processes and procedures as key functions to success in this role. Interact closely and manage relationships with product vendors and service providers, personnel from various IT departments - including Service Desk, Data Center, and Server Admin teams - as well as with business departments.
Professinal Experience:- Minimum of 3 years' experience in a SOC environment handling triage alerts and threat hunting, preferably in the financial sector as well as 1-3 years as an Associate Security Engineer
- Intermediate knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management
- Intermediate technical knowledge of security-related systems and applications, especially Next Generation firewalls, Email and DLP (Data Loss Prevention) protection, intrusion detection/prevention, web content filtering, and file integrity monitoring solutions
- Proficient knowledge of network infrastructure, including routers, switches, firewalls, and associated network protocols and concepts
- Advanced understanding of SIEM (Security Information and Event Management) technology and ability to query/review logs
- Proficient understanding and knowledge of risk and vulnerability assessments and ability to think through and review solutions put in place
- Fluent English (commonly spoken European languages are a plus); Strong written and verbal communication skills are required
- Strong analytical and problem-solving skills to enable effective security incident and problem resolution
- Strong ability to provide detailed reports to management when directed
- Multi-tasking required; Ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously
- Ability to work well under minimal supervision
- Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel
- Strong customer/client focus, with the ability to manage expectations appropriately, provide superior customer/client experience and build long-term relationships
- Bachelor's in Computer Science, Networking, Cyber Security, or related field; Minimum ISC2 CC required. Equivalent work experience accepted.
Licenses/Certifications: ISC2 CC (Certified in Cybersecurity - Required)/Security+/AZ-500/CCNA-Security (Cisco Certified Network Associate) / GSEC (GIAC [Global Information Assurance Certification] Security Essentials)
Key Responsibilities:- Follows standardized practices/procedures while routing and resolving IT service tickets and assignments.
- Adhere to all documented SLAs, closing tickets within a reasonable amount of time
- Respond to and, where appropriate, resolve or escalate reported security incidents
- Work in tandem with a Managed Security Operations Center (mSOC) to quickly detect, contain, and eradicate security threats
- Monitor system logs, SIEM (Security Information and Event Management) tools and network traffic for unusual or suspicious activities. Interpret such activity and make recommendations for resolution
- Collate security incidents and event data to produce detailed monthly exception and management reports
- Perform routine monitoring and reporting of antivirus, spam filtering email gateway, web content filtering, and peripheral device control systems
- Develop and maintain documentation for security systems and procedures
- Monitor internal control systems to ensure that appropriate information access levels and security clearances are maintained
- Maintain and modify the vulnerability management program, which includes creating scheduled scans, reviewing scan results, and recommending remediation
- Participate in infrastructure projects to develop, plan, and implement specifications for network and distributed system security technologies in support of key information systems
- Download and test new security software and/or technologies
- Investigate and address security vulnerability disclosures from vendors and third parties
