Senior Security Consultant - Endpoint

Burbank, California

Employer: Procom
Industry: Technology
Salary: Competitive
Job type: Part-Time
The Information Security Engineer Senior is responsible for designing, implementing and maintaining technical cybersecurity controls, in alignment with business, policy and compliance requirements.

Responsibilities
  • Establishes foundational security capabilities as mature service offerings that allow for a seamless user experience. Initiates, coordinates and monitors progress on approved information security initiatives.
  • Establishes and applies risk management principles for consistent tracking and measurement in compliance with industry standards.
  • Supports governance, risk and compliance programs and leads maturity efforts including external regulator, auditor, and senior leadership information and materials.
  • Assesses and analyzes employee risk due to accidental, incidental, and awareness security issues. Conducts scheduled penetration testing, simulating attacks on systems to find exploitable weaknesses.
  • Engineers security solutions efficiently with a minimal technology footprint where possible while ensuring security. Researches, analyzes, and recommends security products, services and tools as needed.
  • Audits identity and access methods to ensure a zero-trust framework for both production and development business application systems.
  • Works with IT, business teams and vendors on security program initiatives and resolves security related issues through leadership of projects and technical implementations.
  • Leads incident response, including steps to minimize impact. Conducts technical and forensic investigations into the source of exploits and the extent of impact.
  • Performs forensic collection of evidence including retrieval, handling and chain-of-custody, processing and reporting with discretion and integrity.
  • Performs scripting and customization of required reports and dashboards for technical and executive audiences in both IT and business units. Demonstrates a mastery of system and peripheral logs and packet telemetry.
  • Provides consistent security guidance that enables new products and solutions to be built securely while validating and or measuring the efficiency of our security posture to include technology reviews, vulnerability assessments, and technical business risk assessments.

Qualifications

Education
  • Bachelor's degree in a related field or equivalent experience is required
  • One of the following technical certifications: MCP, CCNA, CCNP or equivalent
  • One of the following security certifications: CEH, Security +, SSCP, SANS GIAC, or equivalent

Experience
  • Must have at least 7 years information security experience, preferably in the financial services industry.
  • Expertise with Active Directory, Okta SSO/MFA, CyberArk PAM
  • Sailpoint IdentityNow and other relevant IAM technologies
  • Strong understanding of networking protocols and the OSI model.
  • Strong knowledge of business, network systems, hardware concepts, and applications including DNS, LDAP, virtualization, database design/hardening, e-mail/secure messaging, Data Loss Prevention, and end point protection.
  • Expertise with endpoint security technologies (Intune, Crowdstrike EDR, Tanium UEM), and CIS operating system hardening.

Knowledge, Skills & Ability
  • Responsible for assisting in the development, documentation and implementation of security controls with a focus on identity and access management and endpoint security technologies
  • Assist in the implementation, administration and maintenance of identity and access management integrations across the enterprise to include active directory, Single Sign-On and Multi-Factor Authentication, directory synchronization, public key infrastructure, privileged access management, role-based access control and federated integrations with both SaaS and on premises applications.
  • Provide subject matter expertise in the ongoing management and administration of the SailPoint Identity Now platform, for user access lifecycle management in accordance with security policies and best practices
  • Enhance endpoint security capabilities through ongoing administration of EDR, UEM, MDM technologies, in fortifying our endpoints against potential breaches and vulnerabilities.
  • Develop and deploy cutting-edge endpoint security solutions to protect our systems and data from malicious activities
  • Act as a key player in our incident response efforts, providing swift and effective responses to security incidents, breaches, and threats
  • Conduct thorough investigations, root cause analyses, and post-incident reviews to continuously improve our incident response capabilities
  • Enhance Security Information Event Management (SIEM) and Security Orchestration Automation & Response (SOAR) coverage across the enterprise infrastructure
Created: 2024-09-28
Reference: CizGqdoH2WoG
Country: United States
State: California
City: Burbank
ZIP: 91506

Similar jobs: