Cybersecurity & Cloud Risk Specialist

Socket.dev; San Diego (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Socket.dev is seeking an IT Risk & Audit professional to guide on security strategy for applications and infrastructure. The role focuses on risk assessments, audits, and policy compliance across a 500+ user environment.

The candidate will triage alerts, perform IT security audits, and manage security platforms while collaborating with stakeholders to improve controls and incident response.

Qualifications

• 5+ years of IT experience in a 500+ user environment
• Experience in IT auditing
• BS in IT or CS or related field; will consider AS with coursework; Security+ and/or Cloud+; and Microsoft 365 service certification

Responsibilities

• Provide guidance on IT risk management, focusing on application and infrastructure security
• Maintain IT Risk Assessment; identify areas for investment and audit focus
• Triage alerts to identify malicious activity and IOCs
• IT security audits across networks, operating systems, and data centers; coordinate with business units and external experts
• Assist in administration of Microsoft 365 Defender for Cloud and other security products
• Assist in administration of security platforms (Vulnerability management, Endpoint Protection)
• Escalate problems to IT Management and identify risks
• Migrate to cloud-based solutions when appropriate
• Record and document service desk processes through to resolution
• Provide management with metrics and SLA reports

Skills

Risk management

IT audit

Communication

Internal controls

Teamwork

Metrics reporting

Education

BS in IT or CS or related field

AS degree with coursework

Security+ and/or Cloud+ certificates

Microsoft 365 service certification

Tools

SIEM knowledge

Microsoft 365/Azure

Active Directory

Service desk software

PowerShell scripting

Networking

Job description

Socket.dev is seeking an IT Risk & Audit professional to guide on security strategy for applications and infrastructure. The role focuses on risk assessments, audits, and policy compliance across a 500+ user environment.

The candidate will triage alerts, perform IT security audits, and manage security platforms while collaborating with stakeholders to improve controls and incident response.