Information Security Admin

Kforce Inc; Scottsdale (AZ); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical benefits

Dental/Vision insurance

401(k) matching

Job summary

Kforce Inc. in Scottsdale, AZ is seeking a Security Administrator to manage multiple security tools, analyze breaches, and handle day-to-day tickets with a focus on remediation and controls.

You will collaborate with auditors, produce security documentation, and assist with threat assessments while applying industry standards (NIST/ISO) and ensuring timely escalation.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, another related field, or equivalent job experience.
• Minimum 2 years of relevant experience (e.g., firsthand experience as a security administrator, network administrator, or system administrator, etc.)
• Possess or obtain industry certifications such as CompTIA Security+ within in six months of hire, paid for by the company
• Experience with architecture/system hardening techniques
• Understanding of network protocols, common services, network vulnerabilities, and network attack patterns
• Broad technical knowledge of server, desktop, and mobile operating systems
• Experience with security and vulnerability management tools found in large network environments
• Experience with remote access solutions, including solutions for mobile devices
• Experience with encryption, anti-virus, and patch management technologies
• Experience monitoring key infrastructure elements, identifying security events, performing analysis, and initiating response activities (including documentation and escalation, as appropriate)
• Knowledge of industry security standards (e.g., NIST, ISO, etc.)
• Experience in performing risk analysis and managing security and technology controls
• Excellent written and oral communication skills, including the ability to communicate security concepts to technical and non-technical audiences
• Strong decision-making capabilities, with an ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution
• Have a team player mentality and the ability to work effectively with diverse stakeholders
• Ability to accomplish tasks by established deadlines and to use time efficiently to balance competing demands and priorities
• A self-starter who takes initiative and requires minimal supervision

Responsibilities

• Administer and maintain up to five security tools and/or applications
• Analyze successful and unsuccessful breaches of security controls, determine their root cause, and support remediation efforts
• Responsible for day-to-day tickets, break fix
• Assist/support escalation of verified security events/incidents from analyst(s)
• Create and maintain global security documents (e.g., procedures and guidelines to address identities, endpoints, data, applications, and infrastructure), and devise methods to measure their effectiveness
• Provide periodic assistance to internal and external auditors (IA) (e.g., Provide control evidence and other requests in a timely manner. Participate in IA interviews, providing clarification of processes and technologies performing controls)
• Assist other team members with security tools, creation of reports and security issues resolution
• Report unresolved network security exposures, misuse of resources, noncompliance
• Manage and maintain external assets
• Manage and review dark web datasets

Skills

Security administration

Root cause analysis

Incident response

Documentation

Auditing support

Communication

Time management

Team collaboration

Education

Bachelor's degree in Computer Science / Information Systems / related field

Tools

Security tools

Job description

Responsibilities

• Administer and maintain up to five security tools and/or applications
• Analyze successful and unsuccessful breaches of security controls, determine their root cause, and support remediation efforts
• Responsible for day-to-day tickets, break fix
• Assist/support escalation of verified security events/incidents from analyst(s)
• Create and maintain global security documents (e.g., procedures and guidelines to address identities, endpoints, data, applications, and infrastructure), and devise methods to measure their effectiveness
• Provide periodic assistance to internal and external auditors (IA) (e.g., Provide control evidence and other requests in a timely manner. Participate in IA interviews, providing clarification of processes and technologies performing controls)
• Assist other team members with security tools, creation of reports and security issues resolution
• Report unresolved network security exposures, misuse of resources, noncompliance
• Manage and maintain external assets
• Manage and review dark web datasets

Responsibilities

• Administer and maintain up to five security tools and/or applications
• Analyze successful and unsuccessful breaches of security controls, determine their root cause, and support remediation efforts
• Responsible for day-to-day tickets, break fix
• Assist/support escalation of verified security events/incidents from analyst(s)
• Create and maintain global security documents (e.g., procedures and guidelines to address identities, endpoints, data, applications, and infrastructure), and devise methods to measure their effectiveness
• Provide periodic assistance to internal and external auditors (IA) (e.g., Provide control evidence and other requests in a timely manner. Participate in IA interviews, providing clarification of processes and technologies performing controls)
• Assist other team members with security tools, creation of reports and security issues resolution
• Report unresolved network security exposures, misuse of resources, noncompliance
• Manage and maintain external assets
• Manage and review dark web datasets

Manage Microsoft Security Platform To Include

• Azure Conditional Access Policies
• Named locations
• Privileged Roles
• Intune
• Microsoft Defender platforms
• Perform threat and vulnerability assessments
• Provide remote access platform design, configuration, and support
• Assist and train members in becoming and remaining compliant with the company's Information Security Policies and Standards, including support of the creation and maintenance of security training content
• Research and participate in the selection of innovative technologies that will protect against data loss; Assist in the configuration and deployment of such tools
• Assist in the development of security awareness communications (Quarterly newsletters)
• Monitor phishing simulation platform

Requirements

• Bachelor's degree in Computer Science, Information Systems, another related field, or equivalent job experience
• Minimum 2 years of relevant experience (e.g., firsthand experience as a security administrator, network administrator, or system administrator, etc.)
• Possess or obtain industry certifications such as CompTIA Security+ within in six months of hire, paid for by the company
• Experience with architecture/system hardening techniques
• Understanding of network protocols, common services, network vulnerabilities, and network attack patterns
• Broad technical knowledge of server, desktop, and mobile operating systems
• Experience with security and vulnerability management tools found in large network environments
• Experience with remote access solutions, including solutions for mobile devices
• Experience with encryption, anti-virus, and patch management technologies
• Experience monitoring key infrastructure elements, identifying security events, performing analysis, and initiating response activities (including documentation and escalation, as appropriate)
• Knowledge of industry security standards (e.g., NIST, ISO, etc.)
• Experience in performing risk analysis and managing security and technology controls
• Excellent written and oral communication skills, including the ability to communicate security concepts to technical and non-technical audiences
• Strong decision-making capabilities, with an ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution
• Have a team player mentality and the ability to work effectively with diverse stakeholders
• Ability to accomplish tasks by established deadlines and to use time efficiently to balance competing demands and priorities
• A self-starter who takes initiative and requires minimal supervision

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.