Network Security Administrator

About Trantor:

Trantor is a technology services company focused on outsourced product development and digital re-engineering. Leveraging our Captive

CoE engagement model, we operate as a seamless extension of our client's teams to provide rapid scalability with predictable budgets. Founded in 2012, Trantor has worked with customers across Tech, Fin Tech, Media & Cybersecurity industries. We have centers in the US, India, Canada, and Costa Rica. We are consistently rated as the #1 employer in the region with the ability to attract and retain technical talent.

Our commitment to excellence and impactful results has translated to long-term relationships and value for our clients and solution partners.

We are seeking a Security Operations Analyst to monitor enterprise security tools, investigate security incidents and vulnerabilities, and support timely threat detection and response across the organization's infrastructure and applications. The role also involves analyzing security metrics, preparing executive reports, collaborating with technical teams on remediation efforts, and driving continuous improvements to the organization's overall security posture.

• Perform daily checks of security dashboards, including Log Rhythm (SIEM), Bitdefender (EDR and Risk Score), Mimecast (email and brand protection), Logic Monitor, Cisco FTD firewalls, and F5 WAF/Load Balancer.
• Monitor developer tool dashboards and code repositories.
• Open security incidents to the appropriate group, including detailed information so engineers can properly investigate and respond.

• Investigate issues identified through security monitoring, such as authentication failures, Mimecast malware, Bitdefender malware, and code vulnerabilities.
• Investigate issues raised via Help Desk incidents, such as Phish Alert Button reports.
• Investigate issues surfaced through security reporting, such as Mimecast malicious attachments and URLs.

• Gather security reports and extract critical statistics.
• Combine key statistics from all reports into executive summary reports.
• Track Mozilla Observatory scores for website security reporting.
• Identify security and risk trends.

• Filter scan reports to identify vulnerabilities by risk level and device.
• Create vulnerability reports by application.
• Meet with system and application groups to guide remediation efforts.

Identify security vulnerabilities through code review.

• Excellent communication skills with both IT teams and end users.
• Experience identifying coding issue in Java.
• Experience identifying coding issue in .NET.
• Website coding issue.
• Experience with infrastructure and operating systems vulnerability assessment.
• Strong process improvement skills.
• Strong problem-solving skills.
• SIEM (log) analysis experience.
• Systems forensics.
• Windows, Linux, and MAC operating systems.
• Network security.
• Malware / EDR management.
• Knowledge of information security policies.
• Vulnerability scanning.
• WAF monitoring and analysis.
• Log Rhythm – ability to search in detail on security events.
• Mimecast Email and BEP – ability to check alerts, block email addresses, and perform basic administration.
• Bit Defender – ability to check for EDR alerts and risk score changes.