Job Responsibilities :

- Perform daily checks of security dashboards, including LogRhythm (SIEM), Bitdefender (EDR and Risk Score), Mimecast (email and brand protection), LogicMonitor, Cisco FTD firewalls, and F5 WAF/Load Balancer.

- Monitor developer tool dashboards and code repositories.

- Open security incidents to the appropriate group, including detailed information so engineers can properly investigate and respond.

- Investigate issues identified through security monitoring, such as authentication failures, Mimecast malware, Bitdefender malware, and code vulnerabilities.

- Investigate issues raised via Help Desk incidents, such as Phish Alert Button reports.

- Investigate issues surfaced through security reporting, such as Mimecast malicious attachments and URLs.

- Gather security reports and extract critical statistics.

- Combine key statistics from all reports into executive summary reports.

- Track Mozilla Observatory scores for website security reporting.

- Identify security and risk trends.

- Filter scan reports to identify vulnerabilities by risk level and device.

- Create vulnerability reports by application.

- Meet with system and application groups to guide remediation efforts.

- Identify security vulnerabilities through code review.

Required Skills and Experience :

- Excellent communication skills with both IT teams and end users.

- Experience identifying coding issues in Java.

- Experience identifying coding issues in .NET and website coding issues.

- Experience with infrastructure and operating systems vulnerability assessment.

- Strong process improvement skills.

- Strong problem-solving skills.

- SIEM (log) analysis experience.

- Systems forensics.

- Windows, Linux, and MAC operating systems.

- Network security.

- Malware / EDR management.

- Knowledge of information security policies.

- Vulnerability scanning and WAF monitoring and analysis.

- LogRhythm ability to search in detail on security events.

- Mimecast Email and BEP ability to check alerts, block email addresses, and perform basic administration.

- BitDefender ability to check for EDR alerts and risk score changes.