Information Security Analyst IV

Mindteck; Silver Spring (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Security Tools Engineer to join their dynamic team. This role involves administering and maintaining security infrastructure, including application and container security tools, while ensuring compliance with corporate security standards. The ideal candidate will have a strong background in security and systems engineering, along with excellent communication skills to articulate security policies effectively. This position offers an exciting opportunity to work with cutting-edge technologies in a collaborative environment, enhancing security measures across various platforms. If you are passionate about cybersecurity and eager to make a significant impact, this role is perfect for you.

Qualifications

• Extensive experience with security tools and cloud infrastructure.
• Strong background in systems engineering and security best practices.

Responsibilities

• Administer security infrastructure and maintain security standards.
• Collaborate with teams to enhance endpoint security and manage incidents.

Skills

Splunk

AWS

Python

Go

Ansible

Terraform

Docker

Cybersecurity

Communication Skills

Education

SPLUNK Admin certification

AWS certifications

Tools

SIEM

SOAR

CloudFormation

Chef

Cribl

Demisto

Job description

What you'll do

The Security Tools Engineer administers, monitors, and maintains security infrastructure, including application and container security tools, security orchestration solutions, SIEM, network security tools, system logging and analysis, endpoint security tools, and vulnerability management systems. The role also involves implementing and maintaining corporate security standards, technologies, and programs.

What you bring

The Security Operations Engineer plays a key role in the information security team, ensuring best practices are followed and that security tools and processes are current. Candidates should have a security and systems engineering background, excellent communication skills, and the ability to articulate security policies to the business.

Job Responsibilities / Typical Day in the Role

1. Build and maintain complex technical infrastructure supporting a secure platform that protects data at rest and in transit.
2. Collaborate with enterprise and business owners to identify endpoint coverage scope and analyze operating systems and security toolsets.
3. Provide technical guidance on industry tools and best practices in endpoint security.
4. Monitor and maintain security tools that enforce security policies and capabilities.
5. Manage enterprise security systems, focusing on minimally impactful security implementations.
6. Enhance efficiencies through automation and orchestration solutions.
7. Administer system infrastructure within public/private/hybrid environments.
8. Stay updated on security trends and assess systems for proper configuration and defense.
9. Deploy and correlate threat intelligence and vulnerability management solutions.
10. Handle day-to-day security operations, including onboarding/offboarding security agents, user access, system security, configuration changes, upgrades, and ensuring system availability and disaster recovery.
11. Serve as a point of contact for incident response, SOC analysts, application engineers, and security management.

Technology requirements

• Extensive experience with Cloud infrastructure, preferably AWS (EC2, ECS, Route53, SNS, Lambda, CloudWatch, Secrets Manager, RDS).
• Experience with configuration management tools (Ansible, Chef) and infrastructure as code (Terraform, CloudFormation).
• Scripting skills in Python or Go.
• Experience administering SIEM solutions, including log data ingestion configuration.
• Managing various security tools (SOAR, SIEM).
• Understanding of authentication/authorization (RBAC, IAM).
• Proficiency with Splunk and related SIEM and SOAR technologies (Cribl, Demisto).
• Experience integrating internal platforms with SaaS solutions like Tenable and SentinelOne.
• Building Docker containers.

Must Have Skills / Requirements

1. Extensive experience with Splunk and related SIEM and SOAR tools (Cribl, Demisto).
2. Extensive experience with Cloud infrastructure (preferably AWS) - EC2, ECS, Route53, SNS, Lambda, CloudWatch, Secrets Manager, RDS.
3. Experience with configuration management tools (Ansible, Chef) and infrastructure as code (Terraform, CloudFormation).

Nice to Have Skills / Preferred Requirements

• Cybersecurity experience.
• Media or entertainment industry experience.

Soft Skills

Exceptional verbal and written communication skills, capable of engaging with both senior executives and technical teams.

Education / Certifications

• SPLUNK Admin certification.
• AWS certifications.

Additional Notes

Location: Silver Springs (flexible). This role offers broad security experience across EDR, SIEM, SOAR, and Vulnerability Management. For more information, visit https://www.mindteck.com/career/life-at-mindteck.html.

Mindteck is an Equal Opportunity Employer, considering all qualified applicants without discrimination based on race, religion, color, national origin, sex, sexual orientation, gender identity, age, veteran status, disability, or other protected traits.