Cyber Security Specialist

Description

TITLE: Cyber Security Specialist

DEPARTMENT: 934 – GO Cyber & Physical Security

JOB SUMMARY:

The Cyber Security Specialist is responsible for the implementation, administration and continuous improvement of the security solutions identified in the organization’s security program to ensure that all information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which the organization operates. This role is responsible for day-to-day security operations including supporting and maintaining a wide range of information security products that monitor and provide compliance across the digital assets owned, controlled and/or processed by the organization.

The Cyber Security Specialist will work jointly with other cyber security team members and with other operational teams to coordinate, facilitate and effectively implement and maintain the compliance of the organization’s security policies and procedures.

ESSENTIAL FUNCTIONS:

• Administer security posture, identify and remediate vulnerabilities, perform threat modeling, implement threat protection, and respond to security incident escalations.
• Threat management, monitoring, and response by using a variety of security solutions across the environment.
• Investigate, respond, and hunt for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products.
• Implement and manage secure, trusted systems to ensure appropriate confidentiality, integrity, availability, safety, privacy and recovery of digital assets owned, controlled and/or processed by the organization including custom or third-party solutions evaluation, selection, and implementation.
• Implement, manage and support secure network solutions to protect against advanced persistent threats.
• Implement, manage, monitor and upgrade security measures to protect QCRH data, systems and networks.
• Administer security technology and audit/intrusion systems that consist of Microsoft, Cisco and other security solutions related to Cloud Security, System Security, Application Security, Data Security, VPNs, IDS/IPS, Web-Proxy, Security Audits and more.
• Participate in the change management process to forecast the effects of change through potential scenarios and the security consequences on information resource changes.
• Test and identify network and system vulnerabilities to determine potential vulnerabilities that could be leveraged by a threat source and address identified issues accordingly.
• Identify and respond to threats including the characterization and attribution of threats, creation and sharing of situational awareness, and the development of mitigation strategies, including handling any system breaches.
• Understand and interact with key stakeholders to ensure the consistent application of policies and standards across all technology projects, systems and services – including privacy, risk, audit and compliance and business continuity management.
• Provide clear risk mitigating directives for projects with digital technology components including the application of controls.
• Manage and maintain a framework for roles and responsibilities regarding information and master data ownership, classification, accountability and protection of digital assets.
• Build external networks consisting of industry and peers, partners, vendors and other relevant parties to stay up to date on best practices to address common trends, findings, incidents, and cybersecurity risks.
• Partner with the architecture team to develop security architecture standards and to ensure alignment between security and the enterprise architecture framework.
• Monitor security advisory groups and ensure necessary security updates, patches and preventive measures are in place.
• Comply with all company or regulatory policies, procedures and requirements applicable to this position.
• Foster and preserve a culture of inclusion.
• Additional duties and responsibilities may be required to support the company’s mission, vision and values.

QUALIFICATIONS:

• High school diploma or equivalent. Bachelor’s degree in management information systems,…