We’re Progress – we offer the best platform for building and deploying tomorrow’s applications quickly and easily. We are bold, forward-thinking innovators who build things that work and care about our customers. We invent and reinvent every day, work together as one, value and respect each other and cheer our wins. Join us as a Cybersecurity Administrator, Principal for our Cybersecurity Operations team.
The Cybersecurity Administrator, Principal role coordinates, administers, monitors, and maintains the technology that support Cybersecurity Operations. This includes but is not limited to network security systems, endpoints detection & response, security information and event monitoring (SIEM) system logging and analysis, threat intelligence, forensics, anti-malware, and vulnerability management solutions.
ROLE RESPONSIBILITIES
- Implement and manage endpoint security solutions to protect systems from malware, unauthorized access, and data breaches.
- Designing, managing, and auditing access to cybersecurity technology solutions using concepts of least privilege and RBAC.
- Oversees, applies, and advises on the implementation of patches, firmware upgrades, configuration changes, and security updates to systems, servers, and software applications for cybersecurity technology.
- Acts as liaison with IT teams for guidance and troubleshooting as the subject matter expert for cybersecurity tools and implementations.
- Implement security hardening best practices (CIS, NIST, etc.) for cybersecurity technology applications and supporting infrastructure (servers, public cloud, databases, etc.).
- Develop and maintain solution design, procedural, and architectural documentation for cybersecurity solutions.
- Oversee and guide the research, assessment, and implementation of new products and services required to support cybersecurity operations.
- Handle day-to-day implementation, monitoring and operational support of hardware, software, customer applications, managed solutions, and service provider relationships.
- Work in tandem with architects, the security operations center (SOC), incident responders, and information technology infrastructure and development team members.
- Collaborate with vendors for procurement and support.
- Assist with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.
- Performs other duties as assigned.
QUALIFICATIONS
- Bachelor’s degree in information technology, Information Security/Assurance, Computer Science, Engineering, or related field or equivalent combination of education and experience.
- 6-8+ years’ experience in cybersecurity, with a system administration and/or security engineering background.
- Highly technical and analytical expertise, with a proven deep background in technology design, deployment, implementation, and delivery.
- Solid understanding of cybersecurity principles, best practices, and frameworks, such as NIST Cybersecurity Framework and CIS Controls
- Working knowledge of Windows, Linux, and Unix (macOS) operating systems.
- Experience researching, deploying, tracking, and maintaining security technology across a large enterprise infrastructure.
- Strong communication skills with a customer service mindset when interfacing with internal and external users.
- Ability to work independently and prioritize tasks in a fast-paced, dynamic environment
PREFERRED QUALIFICATION
- Expert level knowledge and experience administering Microsoft Defender for Endpoint.
- Expert level knowledge and experience administering vulnerability management solutions (Rapid7 insightVM, Tenable, Qualys, etc.).
- Experience administering SIEM systems, threat intelligence platforms, threat intelligence, security automation and orchestration solutions, IDS/IPS, file integrity monitoring (FIM), data loss prevention (DLP) and/or other network and system monitoring tools.
- Experience with operations and security across Amazon Web Services (AWS) and/or Microsoft Azure
- Experience managing large scale technology projects
- One or more of the following certifications CEH, CISSP, CRISC, GSEC, GSED, CISM, GSE.
What we offer in return is the opportunity to join a talented team of bright and nice people and to also enjoy:
- 30 days of earned leaves plus an extra day off for your birthday, various other leaves like marriage leave, Casual Leave, Maternity leave, Paternity leave
- Premium Group medical Insurance for employee and 5 dependents, personal accident insurance coverage, Life insurance coverage
- Professional development reimbursement
- Interest subsidy on loans - either vehicle or personal loans
#LI-Remote #LI-SR1