IT Security Associate

该职位来源于猎聘

• Under general direction, monitors the Hematogenix environment for active security threats.
• Monitors network events and alarms and responds accordingly.
• Investigates anomalous activity, follows up with appropriate parties, and reports on findings.
• Performs general administration/maintenance of the security technologies and tools employed at Hematogenix.
• Interprets and disseminates security-related information as needed, maintains Cybersecurity Awareness Training program.
• Reviews internal, external, and regulatory recommendations and follows up to ensure company adaptation.
• Maintains and enforces Information Security policies and procedures.
• Performs vulnerability assessments.
• Participates in incident response and forensic investigation activities.
• Performs regulatory compliance support.
• Assists all IT personnel to resolve security problems.
• Performs general administration/maintenance of the security technologies employed at Hematogenix, including setting up, troubleshooting, and assisting End user.
• Help perform audit and regulatory reviews through documentation gathering.
• Interpret and disseminate security-related information as needed.
• Review internal, external, and regulatory recommendations and follow up to ensure company adaptation.
• Perform day to day tasks as it relates to Information Security. Qualifications
• Bachelor’s degree in computer science or related field. Relevant experience may substitute for the degree requirement on a year for year basis.
• Strong understanding of system security concepts and practices; good understanding of networking technology
• Experience collaborating with multiple departments.
• Working knowledge of security tools such as firewalls, IDS/IPS, A/V, anti-spam, content management, malware defense.
• Excellent analytical skills and attention to detail.
• Technical knowledge of Linux and Windows.
• 1-3 years of experience working in a Security Operations Center (SOC).
• 1-3 years of experience working with SIEMs and evaluating SIEM alerts.
• 1-3 years of experience with centrally managed EDR and system security solutions.
• 1-3 years of experience administering or investigating.

The Following Skills Are Not Required But Highly Desirable

• One or more security-related certifications such as Security+, CISSP, CISA, AWS Security
• Project management and leadership skills, including the ability to organize and lead the work of others performing closely related or allied work.
• Familiarity with IAM lifecycle, concepts, and technologies.
• Knowledge of regulations and cyber security best practices including the NIST Cybersecurity framework and ISO27001
• Azure Certification.
• Strong understanding of Active Directory and Group Policies.