IT Security Operations Engineer

Certara; St. Louis (MO); On-site; USD 90,000 - 140,000; Full time

Job summary

Certara is seeking a Security Operations Engineer to join our team in the United States. The role focuses on operating and maintaining the information security system, responding to enterprise security events, and performing threat analysis.

You will work with multiple departments to implement security controls and support investigations. The ideal candidate has a degree in computer science or related field, with certifications such as CEH or CompTIA CySA+ as a plus, and solid scripting in KQL,

Qualifications

• Associate or Bachelor's degree in computer science or related field preferred; equivalent experience may be considered.
• Certifications such as CEH or CompTIA CySA+ are a plus.
• Scripting knowledge in KQL, Python, and PowerShell is desirable.
• Understanding of endpoint and network behavior analysis techniques and tools.

Responsibilities

• Understand and contribute to implementing security controls.
• Prioritize and diagnose incidents; perform incident response and documentation.
• Maintain security and compliance management tasks.
• Contribute to security standards, procedures, and processes.
• Assist with vulnerability remediation and stakeholder coordination.
• Support digital forensic investigations and evidence processing.
• Some travel may be required.

Skills

Incident response

Threat hunting

Security operations

KQL scripting

Python

PowerShell

Education

Bachelor's degree in computer science

Tools

EDR tools

KQL

Python

PowerShell

Job description

Overview

Certara accelerates the potential of bringing medicines to market and to patients using biosimulation software, technology, and services to transform traditional drug discovery and development. Our clients include more than 2,400 biopharmaceutical companies, academic institutions, and regulatory agencies across 70 countries.

Our goal is to enable the life sciences industry's use of data, modeling, and analytics to make better decisions across the various phases of discovery and drug development. Our software and scientists incorporate modern advances in scientific understanding, drug development experience, data analysis, and AI resulting in significant opportunities to decrease the cost and increase the probability of success for new drug approval and commercialization.

Security Operations Engineer participates in the operation and maintenance of the information security system of the organization. I investigates and responds to enterprise security events, incidents, and requests.

Security Operations Engineer conducts computer and network intrusion detection, incident response, contributes to forensic investigations, data recovery and electronic discovery under guidance and cooperates with multiple departments within the organization.

Security Operations Engineer conducts small scale threat analysis for the environment and leads smaller security initiatives contributing to security program implementation. Performs troubleshooting and small to medium scale threat analytics and hunting for the environment.

Responsibilities

• Understand s the purpose of and contribute s to the implementation of elementary physical and technical security controls.
• Prioritizes and diagnoses incidents according to agreed procedures. Performs incident response, investigates causes of incidents and seeks resolution. Escalates unresolved incidents. Documents and closes resolved incidents according to agreed procedures.
• Performs maintenance tasks related to security and compliance management program of the organization.
• Contributes to the implementation of company level controls aligned with information security standards applicable to the organization.
• Contributes to Security Operations standardization by contributing to development of Standards, Procedures and Processes.
• Contributes to the remediation of identified vulnerabilities by coordinating with relevant stakeholders.
• Supports the identification of areas for improvement in operations proposing actionable items
• Contributes to digital forensic investigations. Processes and analyzes evidence in line with policy, standards and guidelines and supports production of forensics findings and reports.
• Some travel may be required

Qualifications

• Associate or Bachelor's degree in computer science or related field preferred. Combination of formal education training and practical experience sufficient to acquire knowledge and skills generally equivalent to those possessed by an associate degree individual may be considered.
• Industry recognized certifications such a a CEH , CompTia CySA + is a plus
• Scripting knowledge preferably in KQL, or basic scripting and programing knowledge in Python, PowerShell
• Has a basic understanding of endpoint and network behavior analysis techniques and tools. Capable of using various detection systems and software.
• Has basic knowledge of several of the following: network foot-printing, port scanning, and enumeration techniques, specific operating system vulnerabilities, web server vulnerabilities, application level exploits, worms, viruses, and Trojans, network vulnerabilities, sniffing, wireless sniffing, IP spoofing, etc.
• Understanding and demonstrated technical skil l s and abilities in the technical information security operations domain
• Works under general direction. Uses discretion in identifying and responding to complex issues and assignments. Receives specific direction, accepts guidance and has work reviewed at agreed milestones.
• Determines when issues should be escalated to a higher level.
• Performs a range of work, sometimes more complex and non-routine, in a variety of environments.
• Has the general, domain knowledge necessary to perform effectively in the organization typically gained from recognized bodies of knowledge and organizational information. Demonstrates effective application of knowledge.
• Takes action to develop own knowledge.
• Plans, schedules and monitors own work competently within limited deadlines and according to relevant, standards and procedures.
• Contributes fully to the work of teams. Appreciates how own role relates to other roles and to the business of the employer or client.

Certara bases all employment-related decision on merit, taking into consideration qualifications, skills, achievement, and performance. We treat all applicants and employees without regard to personal characteristics such as race, color, ethnicity, religion, sex, sexual orientation, age, nationality, marital status, pregnancy, physical or mental condition, genetic information, military service, or other characteristic protected by law.