Onsite Information Security Specialist - Domain Defender

ddc; Bohemia (NY); On-site; USD 70,000 - 90,000; Full time

Job summary

Data Device Corporation (DDC) is seeking an Information Security Specialist to build and operate our internal security program onsite at the Bohemia, NY office. The role covers security operations, IAM, endpoint and network defense, vendor risk, compliance, and end-user enablement.

You will work with IT, engineering, and business teams to keep the company secure without slowing it down; requires 3+ years in information security and relevant certifications.

Qualifications

• Associate’s or Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or related field preferred.
• 3+ years of experience in information security, IT operations, or a closely related field, with hands-on exposure to multiple security domains.
• Working knowledge of SIEM, EDR, vulnerability scanners, identity providers (Okta, Entra ID, or similar), and cloud platforms (AWS, Azure, or GCP).
• Solid fundamentals in networking, operating systems and authentication protocols.
• Familiarity with compliance frameworks, especially CMMC / Cyber Essentials + practicing Europe contexts.
• Industry certifications such as CISSP, CISM, CCIE, CCNP Security, CompTIA Security+, Network+, CISA, CRISC or similar.

Responsibilities

• Support day-to-day security operations, including alert triage in SIEM/EDR, log review, and incident response assistance.
• Administer identity and access management systems including SSO, MFA, directories, onboarding, transfer, and offboarding processes.
• Maintain and improve endpoint security across fleet, including EDR health, patch management, baselines, and disk encryption.
• Assist with network security tasks such as firewall reviews, VPN administration, segmentation, and monitoring misconfigurations.
• Support vulnerability management: scanning, prioritizing findings, remediation coordination, and metric tracking.
• Contribute to the compliance program by collecting evidence, maintaining policies, and preparing for audits (CMMC/NIS2/Cyber Essentials+).
• Support vendor risk management by reviewing third-party security docs and tracking risk acceptances.
• Build and deliver security awareness content, including phishing simulations and onboarding training.
• Be the go-to security contact for employees for questions, suspicious emails, or access requests.
• Document processes, runbooks, and standards to scale the program.

Skills

Security operations

Identity & access management

Endpoint security

Scripting (Python/PowerShell/Bash)

Education

Associate's or Bachelor's degree in IT/CS/IS/Cybersecurity

Tools

SIEM

EDR

Vulnerability scanners

Okta/Entra ID

AWS

Azure

GCP

Job description

Data Device Corporation (DDC) is seeking an Information Security Specialist to build and operate our internal security program onsite at the Bohemia, NY office. The role covers security operations, IAM, endpoint and network defense, vendor risk, compliance, and end-user enablement.

You will work with IT, engineering, and business teams to keep the company secure without slowing it down; requires 3+ years in information security and relevant certifications.