Overview
The Senior Security Administrator supports and maintains the organization's security environment by protecting information, systems, and resources from security risks, and supports the administration, monitoring, and continual improvement of cybersecurity applications and platforms.
What you'll do
- Administer and maintain cybersecurity platforms (e.g., SIEMs, EDR solutions, vulnerability scanners, email security gateways, public security scoring sites).
- Monitor cybersecurity tools and platforms for disruptions, alerts, misconfigurations, and performance issues.
- Perform basic troubleshooting of platforms and escalate significant issues and incidents to senior security staff in a timely manner.
- Recommend and assist with functional improvements to existing security solutions.
- Participate in audits, security reviews, and compliance initiatives as needed.
- Assist in documenting cybersecurity processes, configurations, and workflows.
- Monitor various platforms for security design flaws, configuration flaws, and other security related service changes.
- Monitor ticketing systems and respond according to severity.
- Perform platform configuration updates as required for end-user operation.
- Monitor end-user compliance with acceptable use policies and configurations to remain in compliance with security requirements.
- Ensure known vulnerabilities are managed and mitigated in a timely manner.
- Evaluate security implications of current processes, service requests, and proposed changes.
- Respond to security events and participate in investigations.
- Ensure regulatory controls are followed and evidence of violation is maintained for review.
- Maintain current knowledge of security practices.
What you'll need
- 4+ years or more of overall IT experience, preferably in systems, network, infrastructure, or technical support environments.
- 1–2 years of experience in cybersecurity or information security, with exposure to security operations and administration.
- 1–2 years of experience working with cloud environments, such as Microsoft Azure, GCP, AWS or similar platforms.
- Experience with anti-malware and malware response, basic administration and monitoring of security tools including antivirus/EDR, SIEM platforms, firewalls, and identity and access management (IAM) systems.
- Experience identifying, assessing, and remediating security vulnerabilities across systems, applications, and infrastructure.
- Exposure to security and secrets management platforms used to protect credentials, keys, passwords, and other sensitive information.
- Ability to properly handle confidential and sensitive information.
- Basic understanding of encryption technologies and digital certificate management, including certificate installation, renewal, and troubleshooting.
- Basic experience with incident response & resolution on Windows and Linux systems, including investigation, containment, and remediation.
- Strong troubleshooting and problem-solving skills, with the ability to investigate and resolve security-related issues.
- Experience with running scripts and scripting languages necessary for troubleshooting and identifying.
- Bachelor's degree in information systems or comparable experience.
- Knowledge of NIST, CIS Top 20, and ISO 27001 controls.
- Knowledge of business impact and critical needs for IT services.
- Ability to manage tasks independently and escalate as necessary.
- Ability to work with and coordinate between multiple groups.
- Ability to function in a dynamic environment, manage multiple tasks and meet deadlines.
- Ability to prioritize appropriately and pay attention to detail.
Nice to have
- CEH, CHFI, SSCP or Security+ certification.
- Desire to learn security best practices and promote security throughout the organization.
Details
Read the full description and apply on the company’s own careers page.