Security Specialist – Governance, SIEM & DLP (SOC)

Philadelphia Comapny; Chicago (IL); On-site; USD 75,000 - 95,000; Full time

Job summary

Philadelphia Company is seeking a skilled Security Specialist to oversee Data Leak Prevention and security incident responses in Chicago, IL. The role focuses on governance of security tools including SIEM and firewalls, ensuring compliance with security protocols and efficient handling of security incidents.

Applicants should have a Bachelor's degree in Computer Science or a related field with at least five years of relevant experience. Strong analytical skills and the ability to communicate effectively in a technical environment are essential.

Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Minimum five years of security technical experience across platforms.
• CISSP or similar certifications preferred.

Responsibilities

• Manage Data Leak Prevention (DLP) service.
• Oversee security managed service providers.
• Participate in computer security incident response (CSIRT) process.
• Conduct vulnerability scans and penetration tests.
• Collaborate with internal and external auditors on controls.

Skills

SIEM operations

CSIRT process

Firewalls

IDS

DLP

Analytical skills

Communication skills

Project management

Cross-platform experience (Windows, UNIX)

Insurance industry knowledge

Education

Bachelor's degree in Computer Science or related discipline

Tools

Security tools

Anti-malware software

Job description

Security Specialist – Governance, SIEM & DLP (SOC)

• Full-time

At Philadelphia Company, we believe that technology should support and enhance your organization’s success, not constrain it. With our wide range of best‑class services, we provide customized solutions that fit your unique IT needs. We’re committed to excelling at our job so you can focus on doing yours.

Summary

IT Security Sr. Specialist provides expertise in evaluation, development, implementation, monitoring and maintenance of information security tools and technologies. Participates in day-to-day security operations and the security incident response process.

Essential Duties & Responsibilities

• Responsible for Data Leak Prevention (DLP) service. Actively monitors DLP system to reduce likelihood that confidential data is removed from “THE CLIENT”'s environment without authorization.
• Governance of security managed service providers.
• Provide governance for and expertise for the monitoring and management of Security information and event management (SIEM) system.
• Understand malware in both static and dynamic environments, including its capabilities and threat, and provide guidance and mitigation strategies to protect against malware.
• Provide expertise on various security tools, including firewalls, Web Application firewalls, IDS/IDP, anti‑malware software.
• Provide governance for and participate in the computer security incident response (CSIRT) process by ensuring that the process is being followed and documented. Respond to escalated security events and drive the security incident response process.
• Participate in the evaluation, development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environments.
• Perform control reviews and account administration of critical information technology resources.
• Participate in vulnerability scans, penetration tests and ethical hacking tests that are conducted and manage results to remediation of issues found.
• Work with internal and external auditors to demonstrate and provide evidence for controls that are in place. May conduct additional testing to validate that items found during tests have been remediated.

Skills, Knowledge & Abilities

• Solid understanding of SIEM operations.
• Experience with the CSIRT process.
• Experience with industry standard security technologies such as firewalls, IDS, anti‑virus and DLP.
• Knowledge of how to apply information security principles to secure platforms and prevent threats.
• Knowledge of regulations (e.g., SOX, privacy, etc.) and internal controls as they apply to IT.
• Ability to influence change in corporate understanding and adoption of information security concepts.
• Proven analytical and problem‑solving skills.
• Experience in multiple operating system environments (Windows, UNIX, etc.).
• Excellent communication and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients.
• Ability to manage various technical projects to completion.
• Preferred insurance industry knowledge.

Education & Experience

• Bachelor's degree in Computer Science, or related discipline, or equivalent work experience.
• Typically, a minimum of five years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination.
• CISSP or equivalent certifications a plus.

All your information will be kept confidential according to EEO guidelines.