Systems Security Specialist

Influx Infosys; Tallahassee (FL); On-site; USD 95,000 - 135,000; Full time

Job summary

Influx Infosys seeks an experienced Systems Security Specialist – SA5 in Tallahassee, FL to provide hands-on security engineering, operations, email security administration, incident response, and threat hunting for a large enterprise environment.

The consultant will administer security technologies, configure policies, monitor health, and perform incident response with cross-team coordination across Defender, Cortex, Tanium, Proofpoint, Tessian, and Abnormal Security.

Qualifications

• 7+ years of progressively responsible IT and cybersecurity experience in enterprise environments.
• 4+ years of recent hands-on production experience with Palo Alto Cortex and Tanium, including Cortex for Endpoint and Tanium Comply Modules.
• 3+ years of recent hands-on enterprise email security experience with Proofpoint, Tessian, and Abnormal Security.
• 3+ years of Microsoft Exchange Administrator experience, including Exchange Online, mail flow, transport rules, connectors, and quarantine.
• 3+ years of hands-on security incident response experience covering alert triage, investigation, containment, and post-incident documentation.
• 2+ years of hands-on threat hunting across endpoint, identity, email, network, and cloud telemetry.

Responsibilities

• Security Platform Administration across Defender, Cortex, Tanium, Proofpoint, Tessian, and Abnormal Security.
• Configure, tune, maintain, and troubleshoot security policies, rules, integrations, connectors, exclusions, alerts, and automated actions.
• Monitor platform health, licensing, utilization, sensors/agents, data flow, and configuration drift.
• Identify security control gaps, conflicting configurations, integration issues, and opportunities for optimization.
• Administer Microsoft Exchange Online and enterprise email security architecture.
• Investigate phishing, business email compromise, and anomalous email activity; coordinate across tools.
• Perform root‑cause analyses and document incident chronology and corrective actions.
• Respond to high-priority security incidents within established response-time requirements.

Skills

Security engineering

Security operations

Email security

Incident response

Threat hunting

Palo Alto Cortex

Tanium

Exchange Online

Microsoft Defender

Tools

Proofpoint

Tessian

Abnormal Security

PowerShell

Job description

Influxinfosys Systems Security Specialist Tallahassee, FL·Contractor Company website

We are seeking an experienced Systems Security Specialist – SA5 to provide hands‑on enterprise security engineering, security operations, email security administration, incident response, and threat‑hunting support for a large enterprise environment.

Description

Position Overview

We are seeking an experienced Systems Security Specialist – SA5 to provide hands‑on enterprise security engineering, security operations, email security administration, incident response, and threat‑hunting support for a large enterprise environment.

The consultant will serve as a primary hands‑on administrator for assigned security technologies and will independently perform security platform configuration, administration, tuning, troubleshooting, investigation, documentation, threat hunting, and incident‑response activities.

Key Responsibilities

Security Platform Administration

• Administer and support enterprise security platforms including Microsoft Defender, Palo Alto Cortex, Tanium, Proofpoint, Tessian, and Abnormal Security.
• Configure, tune, maintain, and troubleshoot security policies, rules, integrations, connectors, exclusions, allow/block lists, alerts, and automated security actions.
• Monitor platform health, licensing, utilization, sensors/agents, integrations, data flow, and configuration drift.
• Identify security control gaps, conflicting configurations, integration issues, and opportunities for security optimization.

Microsoft Exchange & Email Security

• Administer Microsoft Exchange Online and enterprise email security architecture.
• Manage mail flow, transport rules, connectors, message tracing, quarantine, anti‑spam, anti‑phishing, impersonation protection, and domain controls.
• Investigate phishing, business email compromise, malicious attachments/links, spoofing, account compromise, and anomalous email activity.
• Coordinate security configuration and response activities across Exchange Online, Microsoft Defender, Proofpoint, Tessian, and Abnormal Security.
• Monitor security queues and perform alert triage and incident response.
• Investigate security alerts and incidents, determine scope and impact, collect/analyze evidence, and recommend containment actions.
• Support endpoint isolation, indicator blocking, malicious email removal, account containment, policy changes, and evidence preservation.
• Perform root‑cause analysis and document incident chronology, findings, actions, residual risk, and corrective recommendations.
• Respond to high‑priority security incidents within established response‑time requirements.

Required Qualifications

• 7+ years of progressively responsible IT and cybersecurity experience in enterprise environments, including security engineering, security operations, endpoint security, identity security, cloud security, and messaging security.
• 4+ years of recent hands‑on production experience with Palo Alto Cortex and Tanium, including Cortex for Endpoint and Tanium Comply Modules.
• 3+ years of recent hands‑on enterprise email security experience with Proofpoint, Tessian, and Abnormal Security. Experience with each named technology is required.
• 3+ years of Microsoft Exchange Administrator experience, including Exchange Online, mail flow, transport rules, connectors, message tracing, anti‑spam, anti‑phishing, quarantine, and mail routing.
• 3+ years of hands‑on security incident response experience covering alert triage, investigation, containment, eradication, recovery, root‑cause analysis, and post‑incident documentation.
• 2+ years of hands‑on threat‑hunting experience across endpoint, identity, email, network, and cloud telemetry.

Preferred Technical Skills

Email Security: Proofpoint, Tessian, Abnormal Security

Threat Hunting: Endpoint, Identity, Email, Network, Cloud telemetry

Scripting: PowerShell

Detection: SIEM/security telemetry, detection logic, indicators, automated response