Responsibilities
- Lead in the design, planning, and implementation of information security solutions
- Tune and design systems infrastructure for security and enhancements
- Automation of manual tasks using scripting and application development
- Investigate and adopt new security technologies/tools as needs arise
- Evaluate, test, and integrate new security controls, settings and security tools
- Provide technical analysis, resolve problems, and propose solutions
- Provide support to, and coordinate with, developers, operations staff, release engineers, Incident Response, GRC, Red Team, and other disciplines
- Educate and mentor team members and operations staff
- Manages the weekly on-call rotation for after-hours support
- Lead projects to completion, help establish runbooks, documentation, and training for other team members
Knowledge and Experience
- Management experience
- Degree in engineering discipline or equivalent experience required
- 7+ years of relevant Engineering or Information Security experience
- Top-tier analytics and problem solving
- Ability to work in a service-oriented team environment
- Must have good people skills, organization, time management, and project management skills
- Communicate effectively with both technical and business resources
Windows, Linux and Mac endpoint detection and analysis. Linux and Microsoft server technologies. Logging and Data collection, normalization, indexing. Network, application, and log-based behavioral detection tools. DNS and application-level content-filtering. SMTP content, header, and attachment detection, filtering, and analysis. Scripting and regular expressions.
