IT Security Specialist

About the role

The IT Security Specialist is responsible for the protection of the organization through both the monitoring of the IT security environment within LB Foster, and the reactive response to threats in our landscape, as well as to build a security conscious culture and develop company-wide best practices for IT security. This position is a skilled technical position in the IT Security department and reports to the Manager, IT Security.

Responsibilities

• Responsible for the monitoring, reporting, deployment, and maintenance of the security platforms in operation within the company.
• Accountable for the reaction, investigation, and response to various threats in our environment when they happen (during and after normal business hours) in accordance with an incident response plan and other IT security processes.
• In charge of the pro-active threat hunting, and cyber security assessment of both our environment and other potential environments. Assessments are expected to be performed with skilled tradecraft, sometimes in conjunction with third parties.
• Conduct the validation of our security posture by analysis and monitoring of the various reports and information produced by our security tools. In addition, participation in table top exercises and 3rd party penetration testing, spot testing and audits is expected.
• Manage small to medium size projects through all phases of the effort (from project initiation to closure and reflection). Project delivery and execution where it relates to security related initiatives.
• Triage and resolve cyber security related service requests and tickets
• Responsible for the health of the security agents and tools deployed throughout our environment.
• Monitor our infrastructure across the enterprise - this includes Private Cloud, Azure, on-site deployments.
• Network security monitoring including firewalls, internet filtering, network security and bandwidth, SD-WAN security, as well as Execution of security projects and initiatives.
• Assist in userbase awareness and training programs.
• Review and investigate submitted phish emails and phish campaigns as well as remediation
• Participate in business level discussions about our digital product security as needed.
• Assist in the implementation of the IT security Controls framework (e.g. NIST, ISO 27001