Information Technology - Sr. Information Security Administrator - Full Time - Remote - (AK,AZ,So.CA,FL,NV,TX,WA,WY)

Responsibilities

• Protect electronic information and infrastructure from external and internal threats, maintain compliance with statutory and regulatory requirements regarding information access, security and privacy.
• Manage and configure security tools and technologies, including firewalls, intrusion detection systems, and antivirus software.
• Analyze logs for suspect intrusion or attacks.
• Analyze event logs, alerts, and system activity to detect anomalies and respond appropriately to potential incidents.
• Oversee and support daily operations of Fortigate Firewalls, Darktrace Email and IDS/IPS, Arctic Wolf SIEM and vulnerability management, Appgate VPN, Sophos Anti-Virus, Fortra DLP, and additional security systems as assigned.
• Monitor security incidents and alerts, escalate as needed, and participate in containment and remediation activities.
• Participate in system security configuration changes (Change/Configuration Management).
• Ensure all changes are properly scheduled, documented, and fully tested prior to roll-out.
• Conduct regular security assessments, audits, and risk analysis to identify vulnerabilities and threats.
• Collaborate with IT and other departments to ensure security measures are integrated into all aspects of the organization's operations.
• Prepare written and oral reports to keep team leaders informed of work progress.
• Maintains and documents security systems in accordance with internal standards.
• Ensures compliance and enforcement of systems standards and policies for connected computing environments.
• Analyzes and participates in the development of security standardization and implementation of security controls.
• Keeps professional skills updated and stays up to date with the latest security trends, threats, and technologies.
• May participate in an on-call rotation or respond to after-hours security events as needed.
• Perform vulnerability assessments, patch management, malware/rootkit protection, log review, access audits, and secure traffic control.
• Ensure timely remediation and proper configuration of network-connected systems.
• Manage secure vendor connectivity.
• Oversee daily performance of security infrastructure including firewalls, SIEM, secure remote access, etc.
• Ensure systems are properly configured, monitored, and updated to maintain network integrity.
• Perform audits and tests of all security systems and work with security vendors to remediate alerts.
• Maintain inventory of security hardware/software and assist in lifecycle management, budgeting, and licensing compliance.
• Manage your time and productivity to ensure projects stay on task in time, cost, and scope.
• Effectively work with project manager and stakeholders, maintaining communications.
• Support ongoing security hardening, DR/BCP exercises, testing of data/system recovery, and improvements to resilience.
• Treats all co-workers and members with respect.
• Support and participate in continuous improvement activities.

Qualifications

• Minimum 5 years experience in information security, network security, or systems administration with hands-on experience managing firewalls, IDS/IPS, SIEM, VPN, endpoint protection, and vulnerability management.
• The incumbent is required to be highly qualified for a large variety of networking security technologies, to possess excellent analytical skills and to demonstrate a high degree of interpersonal abilities.
• Strong understanding of network security and protocols, traffic capturing and protocol analysis. Hands on implementation, configuration, and management of security enterprise infrastructure.
• Physical work experience with enterprise class firewalls and IDS.
• Knowledge of information security governance.
• Excellent communications and interpersonal skills, and ability to work effectively with all organizational levels and auditing entities.
• Able to work on multiple projects/priorities in a deadline-driven environment and adapt quickly to change.
• A wide degree of creativity and latitude is expected.
• Foundational certifications such as CompTIA Security+, Network+, or equivalent knowledge gained through work experience are preferred for minimum qualification.
• Equivalent professional experience may be considered in place of formal certifications.
• 3 years experience as a security administrator with exposure to financial services, banking, or credit-union environments.
• Experience administering enterprise platforms such as Fortigate firewalls, Darktrace, Arctic Wolf SIEM, Appgate VPN, Sophos, and Fortra DLP.
• Experience working with cloud or hybrid infrastructures (Azure, AWS, GCP) is strongly preferred.
• Experience with cloud security and virtualization technologies.
• Knowledge of UNIX/Linux operating systems.
• Ability to conduct research into a wide range of information security issues as required.
• Ability to absorb and retain information quickly.
• Ability to present ideas in user friendly language to non-technical staff and end-users.
• Information Security certifications (CISSP, CEH, MCSE) are preferred but not required.