ExtraHop Administrator

Job Summary:

We are seeking an experienced ExtraHop Administrator to manage and maintain our network detection and response (NDR) platform, ExtraHop Reveal(x). The ideal candidate will have a strong background in network security, administration, and a deep understanding of the ExtraHop platform. The ExtraHop Administrator will be responsible for ensuring the platform's optimal performance, configuration, and security in a dynamic IT environment.

Responsibilities:

Deploy, configure, and maintain the ExtraHop Reveal(x) platform to ensure efficient and effective network traffic analysis and threat detection.

Monitor network traffic and behavior using the ExtraHop platform to identify and respond to security threats and anomalies.

Collaborate with the security team to develop and refine detection rules, alerts, and response actions based on evolving threat landscapes.

Perform regular updates, patches, and upgrades to keep the ExtraHop platform up-to-date and protected against vulnerabilities.

Tune and optimize the platform's performance to ensure accurate and timely threat detection without causing network degradation.

Collaborate with IT teams to integrate ExtraHop with other security tools, SIEMs, and IT management systems.

Provide technical support and troubleshooting assistance for the ExtraHop platform, resolving issues in a timely manner.

Monitor and manage encrypted traffic analysis, ensuring the security and privacy of sensitive data.

Generate reports and insights from the ExtraHop platform to present to stakeholders and leadership.

Stay current with industry trends, best practices, and emerging threats related to network security and NDR technologies.

Assist in training security analysts and IT staff on the use of the ExtraHop platform.

Qualifications:

Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent work experience).

Proven experience as an ExtraHop Administrator or in a similar role, with a track record of successfully managing and maintaining the ExtraHop Reveal(x) platform.

Strong knowledge of network protocols, security best practices, and threat detection methodologies.

Familiarity with cybersecurity frameworks and compliance standards.

Experience with other security tools, SIEM platforms, and IT management systems.

Solid understanding of network architecture, including switches, routers, firewalls, and load balancers.

Excellent problem-solving skills and the ability to troubleshoot technical issues.

Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.

Relevant certifications such as ExtraHop Certified Platform Administrator (ECPA), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are a plus.