Responsibilities

Roles and Responsibilities

• Diagnose and solve Level 2 issues related to security configurations and platforms as escalated by Level 1 support
• Support standards for the classification, administration, and lifecycle management of Suffolk data, including helping apply established data handling requirements across systems and business processes.
• Serve as a key security resource for Suffolk corporate applications by helping assess risks, support secure configurations, review access controls, and coordinate remediation with application owners and technical teams.
• Participate in independent security audits, vulnerability scans, and penetration tests on Suffolk infrastructure to ensure confidentiality, integrity, and availability of Suffolk data.
• Help enforce Suffolk identity and access management policies and procedures for on-premises and cloud-based services by supporting access reviews, role-based access controls, privileged access controls, secure authentication practices, and remediation of access-related findings.
• Support identity manageability, access governance, provisioning, security, and privacy. Implement and manage solutions for secure identity through third-party providers.
• Provide operational assistance with vulnerability scanning, gap analysis, and security initiatives. Monitor findings, validate risk and ownership, triage remediation priorities, track corrective actions, and report progress for Suffolk systems.
• Help identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams to understand root causes, document findings, and coordinate practical remediation.
• Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management understand trends, prioritize remediation, and track progress against security initiatives.
• Support Suffolk’s enterprise security systems and manage comprehensive, data-driven review processes to enhance critical security infrastructure
• Mentor Help Desk Analysts, developing skillsets through exposure to security administration while promoting Suffolk information security standards.
• Remain informed about evolving security challenges in IT and how they affect Suffolk. Maintain an understanding of the current threat and attack landscape, latest security trends, and Suffolk information systems.
• Support Suffolk’s information security posture in accordance with Suffolk’s evolving business requirements by contributing to security operations, control improvements, and risk reduction initiatives.
• Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and support for cloud workload protection in Azure, AWS, or similar platforms.

Skills and Knowledge

• Strong interpersonal skills, including collaboration, communication, negotiation, and mediation
• Strong peer influence skills with the ability to enable secure solutions while maintaining effective working relationships with business partners.
• Excellent written documentation ability, including the flexibility to deliver varied content to varied audiences
• Demonstrated experience designing, installing, and configuring enterprise security solutions while meeting enterprise architecture, security, and privacy needs.
• Technical foundation in systems security and network security. Experience with pen testing, security scanning, threat modeling, and incident management are desirable.
• Familiarity and experience with industry standard enterprise security solutions such as Microsoft security tools, vulnerability management platforms, cloud security platforms, and security monitoring solutions.
• Familiarity and experience with information security frameworks (NIST, ISO 27001, etc.) and understanding of security configuration guides (DISA STIG, CIS, etc.)
• Familiarity and experience with current regulatory and contractual security requirements and the ability to support organizational compliance efforts, including PCI, MA 201 CMR 17.00, CCPA, HIPAA, and similar requirements.
• Strong working knowledge of endpoint and server operating systems (e.g. Windows, MacOS, Linux) and relevant security risks, controls, and vulnerabilities.
• Strong collaboration skills with development, engineering, and DevOps teams, enabling the successful integration of security requirements, controls, and automation into software delivery pipelines.

• BS degree in computer science, information systems management, or a related technical discipline or the equivalent combination of education, technical training, or work/military experience.
• At least one industry certificate is desirable (CISSP, CISA, etc.)
• 3+ years of experience with enterprise information security, preferably within complex organizations.
• 3+ years of experience with enterprise cloud-based solutions (Azure, AWS, etc.)
• 3+ years of experience with large, distributed systems.
• At least 5 years of relevant work experience in IT and/or information security required, including hands-on experience supporting enterprise systems, security tools, or security operations.
• Project management and audit experience desired.

While performing the duties of this job, the employee is regularly required to sit for long periods of time; talk or hear; perform fine motor, hand and finger skills in the use of a keyboard, telephone, or writing. The employee is frequently required to stands; walk; and reach with arms and/or hands. Specific vision abilities include close vision, distance vision, depth perception and the ability to adjust focus. The employee will spend their time in an office environment with a quiet to moderate noise level. Job site walking.

Where required by law, pay ranges can be found in Suffolk's job postings. Base Salary for this position is just one component of Suffolk’s total rewards package for employees. Actual salaries may be based on several factors including, but not limited to, a candidate's skill set, experience, education and other qualifications. Suffolk offers a comprehensive benefits package as part of its overall total rewards strategy. Salary ranges are reviewed regularly to reflect market trends.