As a
Manager, Security, you will be a technical resource for implementing, maintaining, and monitoring Hunter's information security systems.
What You'll Do: - Design, implement, manage, maintain, and troubleshoot Hunter's various security systems, including Data Loss Prevention (DLP), User and Entity Behavior Analytics (UEBA), Anti-malware, Network Access Control, and Data Security/Auditing platforms.
- Proactively identify operational vulnerabilities and take steps for remediation. Make recommendations to improve performance and information security and implement changes in collaboration with the team.
- Conduct threat and vulnerability assessments in collaboration with external auditors to understand and eliminate potential system and network vulnerabilities.
- Act as a technical leader for security incident detection, response, handling, and forensics.
- Act as a liaison with senior business leaders, including the executive Cybersecurity Committee, providing written and verbal updates, reports, and recommendations.
- Create or update incident response plans as they relate to IT security events.
- May occasionally provide end-user security training.
- Provide end-user support as necessary.
- Provide exceptional customer service while acting ethically and maintaining business confidentiality.
- Provide after-hours support as required and be able to identify critical issues that require urgent response.
- Perform daily monitoring to ensure the availability and integrity of key infrastructure resources.
- Additional duties as assigned.
What You'll Bring: - 5+ years of experience in Information Technology with an emphasis on IT Infrastructure and/or Systems Administration Required.
- 5+ years of demonstrable IT experience with significant Infosec/Cybersecurity experience. The experience should primarily support a Windows user environment.
- Must have experience configuring, troubleshooting, and supporting anti-malware monitoring, detection, and response systems.
- Must have demonstrable experience performing and managing proactive risk identification and mitigation, including penetration testing, network vulnerability assessments, and system risk profiling.
- Must have demonstrable experience in security incident detection, response, handling, and forensics.
- Must have excellent verbal and written communication skills.
- Must have a strong understanding of Microsoft Windows Server 2003 through 2016.
- Must possess a very strong troubleshooting methodology to tackle issues efficiently.
- Must be self-starting and self-sufficient to complete tasks in a timely and effective manner.
- Preferred Experience and Skills:
- Possess a strong understanding of network functionality, with experience managing network access control (NAC) systems, including Cisco ISE or Packet Fence (or similar) highly desired. Packet Fence experience is a plus.
- Experience with agentless data security platforms, including Netwrix Auditor, preferred.
- Experience with next-generation antimalware software, including CrowdStrike.
- Solid grasp of MS Active Directory and Group Policy.
- CISSP/GAIC certifications are a plus.
- Experience managing Data Loss Prevention (DLP) and User and Endpoint Behavior Analytics (UEBA) tools; experience with the Elastic toolset is highly desired.
- Small team management skills are a plus
What We Offer: - Industry-Leading Healthcare Coverage
- Profit-Sharing Plan with Safe Harbor Contribution
- Generous Paid Time Off & Holidays
- Paid Parental Leave
- Tuition Reimbursement Program
- Free Onsite Fitness & Recreation Center