Senior Information Systems Security

GDT - General Datatech; Dallas (TX); Hybrid; USD 108,000 - 132,000; Full time

Job summary

GDT - General Datatech is hiring a security professional in Dallas, TX for a hybrid role, requiring 2 days onsite per week. The position demands expertise in securing data and systems, with a base salary around $120k depending on experience.

Ideal candidates will possess a Bachelor's degree in Management Information Systems and at least six years of relevant security experience, including certifications in cybersecurity. Responsibilities include conducting risk assessments, managing security tools, and staying updated with the latest security trends.

Qualifications

• Six years of experience in an information systems security domain.
• Current CompTIA Security+ Certification or equivalent required.

Responsibilities

• Research potential impact of new threats and conduct log analysis.
• Design and execute security projects to improve detection.
• Develop strategies for investigating unusual behavior.
• Conduct network security scans and penetration tests.
• Perform implementation analysis and risk assessments.
• Design and support security tools and infrastructure.

Skills

Knowledge of NIST, HITRUST, PCI, HIPAA Security Rule

Professional experience in a system administration role

Technical risk assessments

Superior writing skills

Working knowledge of network security principles

Education

Bachelor's degree in Management Information Systems

Tools

Local area networks

Microsoft Active Directory/GPO

Cloud Access Security Broker

Job description

Dallas, TX – Hybrid, 2 days onsite per week

Full-Time/Direct Hire

Salary around $120k, depending on experience

Position Summary

The primary responsibility of this position is to ensure the confidentiality, availability and integrity of data, computer systems and network devices by recommending, implementing and utilizing security defense systems to reduce the opportunity of cyber-attacks.

Responsibilities

• Research and investigate the potential impact of new threats and exploits. Conducts log analysis and other network forensic investigations.
• Identify, design and execute security projects that improve detection and response capabilities. Collect threat intelligence and automate systems to consume threat feeds and track adversaries.
• Develop alerting and detection strategies to investigate any unusual behavior.
• Conduct various network security scans and penetration tests to detect cybersecurity threats and identify weaknesses that may be exploited by malicious parties.
• Solely performs implementation analysis and technical risk assessments on systems to ensure conformity to current security standards and operational support requirements are being met.
• Manages on-time delivery of assigned tasks against existing plans and schedules.
• Design, implement and support Information Security tools and infrastructure systems maintained by the Information Security Organization. Examples of such tools are web filtering technology, IDS/IPS appliances, SIEM tools, anti-spam/antivirus systems, data leakage appliances, content screening servers, VPN systems and firewalls.
• Maintains knowledge of applicable rules, regulations, policies, laws and guidelines that impact the environment.
• Participates in the creation of effective security controls designed to promote adherence with applicable laws and accreditation agency requirements. Seeks advice and guidance as needed to ensure proper understanding.
• Stays abreast of new developments in the field of technology and security by attending seminars/workshops, reading professional journals, and actively participating in professional organizations. Integrates knowledge gained into current work practices.

Skills

• Knowledge of NIST, HITRUST, PCI, HIPAA Security Rule and associated common security frameworks.
• Professional experience in a system administration role supporting multiple platforms and applications.
• Must have the ability to perform complex research in order to determine industry standard products and solutions in response to security requirements.
• Must have the ability to develop project plans, organize and monitor tasks, and be able to produce quality results in a timely manner.
• Must be able to perform technical risk assessments and implement corrective actions regarding the safeguarding of information systems.
• Must be able to independently implement and maintain complex information security tools and provide guidance to other technical staff on proper use of the tools.
• Must have superior writing skills and the ability to communicate effectively.
• Working knowledge of design, implementation, and maintenance of: Local area networks, Microsoft Active Directory/GPO, Data Loss Prevention, Encryption Technologies, Intrusion Detection Systems, Intrusion Prevention Virtual Private Network, Linux Operating Systems, Windows Operating Systems, Communication Protocols, Multi-factor authentication, Cloud Access Security Broker, Endpoint Detection and Response Technologies, Security Information and Event Management Tools.
• Must have advanced working knowledge of network and vulnerability assessments, malware analysis, threat intelligence and vulnerability management.
• Must be able to listen and communicate effectively with executive level staff and leadership teams.
• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering.
• Experience with hacker techniques and network security principles.

Qualifications

• Must have a Bachelors degree in Management Information Systems.
• May have an equivalent combination of education and experience to substitute for both the education and the experience requirements.
• Must have six years of experience in an information systems security domain with a background in mobile device security, endpoint protection, wireless protection, vulnerability management, incident response and mitigation, threat research and cyber intelligence analysis or other cyber security domain.
• Must have a current CompTIA Security+ Certification or equivalent in industry certification, background and knowledge within 6 months of placement into the position.