IT Specialist - SR. IT Specialist - Cybersecurity

IT SPECIALIST - SR. IT SPECIALIST - Cybersecurity

SwRI Cybersecurity Operations’ mission is to secure the enterprise by evaluating, implementing, and operating a full suite of cybersecurity tool and services. We are responsible for configuring, administering, and supporting network and endpoint security systems. Operations include firewalls, intrusion prevention and operational incident detection and response and security orchestration and automation. From policy, through assessment and implementation, to operations and response, candidates will have the opportunity to engage in the full security lifecycle

• Provide cybersecurity analysis and support in an Enterprise environment.
• Maintain cybersecurity infrastructure and provide daily analysis and support for cybersecurity operations.
• Recommend, evaluate, and deploy new cybersecurity technology and capabilities.
• Support vulnerability and threat assessment operations.

• Monitoring and maintaining endpoint protection and response (EDR) and Security Orchestration, Automation and Response (SOAR) systems.
• Monitoring and maintaining the Enterprise Vulnerability Management and Penetration Testing programs.
• Participate in daily review of alerts and incident response analysis activities.
• Remote Access configuration and user support.
• Perform malware analysis as needed.
• Monitoring and management of cyberthreat intelligence feeds to include integration into various security platforms to identify indicators of compromise to enrich alerting.

• Requires a Bachelors in Cybersecurity, IT Operations, or related with related experience. In Lieu of a degree 5 years of Cybersecurity or IT administration experience and related certifications will be considered.
• 3 years:
  Relevant Cybersecurity or IT administration experience.
• 3-7 years:
  Experience working with network security platforms such as Endpoint Protection, Threat Intelligence.
• 3-7 years:
  
  Experience with administration of modern operating systems (e.g.
  
  - Windows Server, Windows Desktop and Linux). Experience with network fundamentals (TCP/IP, Vlans and network subnetting) as well as scripting, development, and utilizing application programing interfaces (API).
• A valid/clear driver's license is required.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.

For benefits information at our San Antonio location,  .
For benefits information at all other locations,  .

An Equal Employment Opportunity

Employer:

race, color, religion, sex, national origin, disability, and veteran status.