IT Security Specialist II

CORE RESPONSIBILITIES

• Provide support to technical and non-technical teams on the security findings while maintaining industry best practice standards.
• Collect, analyze threat intelligence reports, and escalate depending on the risk level.
• Drafts comprehensive reports, including assessment-based findings and outcomes, and propositions for further system security enhancements.
• Performs vulnerability scans, assesses impact and risk, and owns remediation efforts end-to-end, ensuring timely resolution and alignment with security priorities.
• Maintains and enhances threat and vulnerability management program to discover and track current cyber-threats.
• Process and enrich information to ensure timely, actionable, high confidence IOCs are ingested and shared with key stakeholders.
• Produce actionable intelligence and proactively drive threat hunting, detection and prevention.
• Partner closely with other functions within the cybersecurity and IT Management teams and collaborate with the security operations center and Managed Security Services Provider to ensure consistent and quality Incident Response services are provided to the organization.
• Produce, maintain, and disseminate threat intelligence summaries.
• Be available for on-call duty to handle high-impact cybersecurity incidents.

Qualifications

• Bachelor's degree in Computer Science, Mathematics, Statistics, or equivalent or a related field. A master’s degree is highly desirable.
• Preferred industry certifications including: CompTIA CySA+ (Cybersecurity Analyst), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or the equivalent, Cloud Computing Security Certification, GIAC Certified Incident Handler (GCIH).
• 5-7+ years of progressive cybersecurity experience with 3+ years directly related to the area of threat and vulnerability management, threat intelligence, incident response, digital forensics, malware analysis, or threat hunting.
• In-depth experience managing vulnerability management tools, e.g., Qualys, Tenable, Rapid7.
• Strong time management, presentation, and communication skills.
• Able to maintain confidentiality, and high levels of integrity in the conduct of personal and professional affairs.
• Skill in collecting, organizing, and analyzing data.
• Able to recognize, analyze, and solve a variety of problems.
• Able to exercise sound judgment in making critical decisions.
• Excellent communication and technical writing skills.
• Strong critical thinking skills.
• Able to work independently and/or in a collaborative environment.
• Able to maintain effective interpersonal relationships.
• Able to communicate effectively in both oral and written form.
• Able to identify and communicate best practices.
• Able to understand, document, and analyze business processes from a control and operational perspective.