Description
Administers, develops and maintains cyber security platforms, software and third party tools.MAJOR RESPONSIBILITIES
- Administer and support security information and event management, log event correlation, anti-virus, intrusion detection and eDiscovery platforms
- Install, patch, upgrade and maintain all Servers and appliances that are used by personnel for security monitoring, incident response, eDiscovery, and digital forensics
- Maintain compliance for those Servers and appliances that exist in a regulated environment.
- Maintain documentation for all systems and create user guides
- Create system performance metrics and trending for capacity planning
- Meet availability and update requirements
- Adhere to enterprise change management procedures
Symantec (or equivalent) Anti-Virus platform administration experience
- Arcsight, Splunk, SIEM and log management/event correlation platform expertise
- Bachelor's degree in Engineering, Computer Science or comparable
- Minimum 5 years IT experience supporting complex network architecture and/or information security platforms at an enterprise level
- Experience supporting Security Systems
- Strong Linux and/or Windows OS and system administration expertise
- Bash, PowerShell, Python, Perl or other common Scripting experience
- Solid comprehension of TCP/IP Networking and common protocols
- Experience with enterprise change management and test procedures
- Information Security Expertise
- Intrusion Detection administration experience
- Experience managing open source tools
- Database management (preferably MySQL)
- Experience managing security appliances and/or security monitoring software
- Experience working in a highly regulated environment