IT Cybersecurity and Cloud Specialist

Socket.dev; San Diego (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Socket.dev is seeking an IT Risk & Audit professional to guide on security strategy for applications and infrastructure. The role focuses on risk assessments, audits, and policy compliance across a 500+ user environment.

The candidate will triage alerts, perform IT security audits, and manage security platforms while collaborating with stakeholders to improve controls and incident response.

Qualifications

• 5+ years of IT experience in a 500+ user environment
• Experience in IT auditing
• BS in IT or CS or related field; will consider AS with coursework; Security+ and/or Cloud+; and Microsoft 365 service certification

Responsibilities

• Provide guidance on IT risk management, focusing on application and infrastructure security
• Maintain IT Risk Assessment; identify areas for investment and audit focus
• Triage alerts to identify malicious activity and IOCs
• IT security audits across networks, operating systems, and data centers; coordinate with business units and external experts
• Assist in administration of Microsoft 365 Defender for Cloud and other security products
• Assist in administration of security platforms (Vulnerability management, Endpoint Protection)
• Escalate problems to IT Management and identify risks
• Migrate to cloud-based solutions when appropriate
• Record and document service desk processes through to resolution
• Provide management with metrics and SLA reports

Skills

Risk management

IT audit

Communication

Internal controls

Teamwork

Metrics reporting

Education

BS in IT or CS or related field

AS degree with coursework

Security+ and/or Cloud+ certificates

Microsoft 365 service certification

Tools

SIEM knowledge

Microsoft 365/Azure

Active Directory

Service desk software

PowerShell scripting

Networking

Job description

Essential Functions/Major Responsibilities:

1. Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.

2. Responsible maintaining the IT Risk Assessment; including identifying areas where business groups should consider additional investment and areas IT internal audit should focus. These include:

   1. Triage and resolve alerts to identify malicious activity and identify Indicators of Compromise (IOCs)

   2. Perform pre- and post- implementation reviews of IT system implementations or enhancements.

   3. IT security audits (e.g. network, operating system and data center), including evaluating if security vulnerabilities are properly identified and mitigated. Coordinate the scope and performance of these reviews as necessary with business units and external security experts.

   4. Evaluate general computing controls and provide value added feedback. Test compliance with those controls.

   5. Perform various other reviews of IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.

3. Assist in administration of Microsoft 365 Defender for Cloud and various other security products.

4. Responsible for assisting with audit efforts and ensuring compliance with corporate OT security standards.

5. Assist in administration of security platforms (Vulnerability management, Endpoint Protection, etc..)

6. Escalate problems / Identify risks (as appropriate) to IT Management.

7. Evaluate existing business solution migration opportunities and work as part of a team to migrate to an appropriate cloud based solution.

8. Assist in administration of Microsoft System Center Service Manager systems

9. Contribute to cloud-based team projected centered around SharePoint Online, Exchange Online, PowerApps, and PowerBI.

10. Record, track and document the service desk request problem-solving process, including all successful and unsuccessful decisions made, and actions taken, through to final resolution.

11. Alert management to emerging trends in risks and incidents.

12. Develop/Update support documents and FAQ sheets

13. Reinforce project and service level agreements to manage end-user expectations.

14. Provide end-user support when required.

15. Provide management with metrics and SLA reports when required.

16. Other duties as assigned.

Supervisory Responsibility:

None.

Qualifications:

Education/Training:

BS degree in IT or computer science or related field required; will consider candidates with AS degree and/or equivalent college coursework.Minimum of Security+ and/or Cloud+ certificate., and certified a Microsoft 365 service such as Microsoft SharePoint / Power Platform.

Experience Required:

5+ years of experience in IT in a 500+ user environment with multiple locations. Experience in IT auditing.

Technical Requirements:

• Security Information and Event Management Toolset knowledge

• Experience with Microsoft 365 and Azure

• Experience with Active Directory administration

• Experience with service desk ticketing software

• Experience with PowerShell Scripting a plus

• Experience with network infrastructure

Skills Required:

• Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences

• Knowledge of internal auditing, internal controls and risk management

• Familiarity with finance and accounting practices and methods

• Comprehensive understanding of internal control environments within the IT function

• Experience with multiple technology domains including aspects of Windows, Unix and/or database administration, software development and networking

• Working understanding of Microsoft 365 services

• Ability to work in a team environment

• Proactive, hands‑on, results‑driven orientation required.

• Ability to blend exceptional attention to detail with an ability to retain strategic direction within a rapidly evolving entrepreneurial business culture

• Ability to produce high quality work products for both the IT groups and Senior Management.

Job Conditions/Physical Demands:

• Office environment

• Available to travel if required

• Walking, standing, bending, stooping

• Ability to sit at computer terminal, use of keyboard

• Ability to lift up to 25 pounds

Protective Devices Required:

In required areas as posted.