Information Security Administrator
The Security Administrator is a role within the Information Security Department which handles many aspects of information security systems management and operations. This role’s responsibilities include day-to-day management of the information security systems and configuration management where applicable, including support, installation, and maintenance of infrastructure components. Additionally, this role will assist with the process to design, build, and deploy security software solutions. The role will also, from time to time, be called upon to assist with security policies, standards, strategies, risk assessments, investigations, audits, and other areas related to security.
Job Duties and Responsibilities:
- Configure, maintain, operate, troubleshoot, and resolve issues with the following technologies:
- Network- and host-based intrusion detection/prevention systems
- Anti-malware protection
- Web application firewalls
- Public Key Infrastructure (PKI) system
- Vulnerability management
- Identity and access management
- Security information and event management (SIEM) and log management systems
- Risk management analysis
- Cloud infrastructure providers
- Report on and assist in determining the effectiveness of currently deployed security technologies
- Assist in the evaluation of new security technologies
- Assist in reviewing solution designs and evaluate compliance to applicable security standards
- Assist in performing security audits and providing recommendations to mitigate risks
- Assist in monitoring for compliance to security standards and policy
- Support disaster recovery and business continuity work practices
- Provide security awareness topics and training to end users as needed
- Maintain hardware and software updates
- Maintain asset inventories of all IT managed equipment
Qualifications (Education, Experience, Certifications & KSA):
- 1 year of experience administering complex IT systems
- Entry-level to intermediate firewall knowledge
- Entry-level to intermediate IDS/IPS knowledge
- Entry-level to intermediate virus protection
- Knowledge of common protocols such as SNMP, HTTP, HTTPS, SMTP, NTP, LDAP, Kerberos, and SFTP
- Knowledge of virtualization technologies such as VMware
- Basic understanding of information security best practices
- Understanding of security incident investigation process
- Basic understanding of computer forensic analysis and network penetration testing.
- Adaptable, flexible, patient, and professional even under tense situations
- Ability to work in a fast paced often high-pressure environments
- Strong attention to detail and excellent organizational skills
- Excellent written, oral, interpersonal, and listening skills essential
- Ability to work independently
- Ability to work within deadlines
- Acute attention to detail and analytical thinking skills
- Ability to act and expand knowledge base
- Ability to learn new things quickly and prioritize work
Certifications may include the following:
- SSCP (Systems Security Certified Practitioner)
- CompTIA Security
- CCNA Security (Cisco Certified Network Associate, Security concentration)
- Global Information Assurance Certification (GIAC, any)
- Offensive Security Certified Professional (OSCP)
Key competencies include the following:
- Disciplined in systems administration and operations
- Good judgment & decision making
- Strong situational analysis.
- Specific technical knowledge (listed above)
- Good communication skills (written and verbal) and interpersonal skills
Applicants:
- Please send inquiries to systemsjobs@ciswired.com
- and include “Information Security Administrator” in the email subject line.
- Local, in-state or regional candidates only