Senior Systems Security Administrator

Position: Senior Systems Security Administrator (Contract)
Position Summary
The Senior Systems Security Administrator is a senior, hands-on technical role responsible for ensuring industry best practices are utilized to secure the firm's server, infrastructure and cloud environments.

The primary focus is vulnerability remediation, security patching and upgrades, server hardening, asset and software lifecycle assessment, and disaster recovery infrastructure.

The successful candidate must be able to independently assess technical issues, develop remediation and implementation plans, troubleshoot complex problems, and execute approved changes with minimal technical direction.

Production updates, upgrades and significant configuration changes will follow established change management processes and require appropriate review and approval.

Standard Responsibilities:
Vulnerability Management, Patching & Hardening

Take technical ownership of infrastructure vulnerability remediation from identification through closure.

Review and prioritize vulnerabilities based on severity, exploitability, system criticality and business impact.

Apply approved security patches, updates, firmware and software upgrades.

Maintain patching schedules and remediate critical vulnerabilities within established timelines.

Identify unsupported and end-of-life operating systems, applications and infrastructure components and develop remediation plans.

Harden Windows Server, VMware, cloud and related infrastructure using recognized security standards and practices.

Implement secure configurations, least privilege and appropriate administrative controls.

Validate successful remediation through testing and vulnerability rescanning.

Infrastructure Security

Ensure security and compliance of Windows Server, VMware, Microsoft Azure and related infrastructure platforms as per approved standards and best practices.

Identify infrastructure requiring patching, upgrades, remediation or replacement.

Maintain accurate technical security documentation, secure system configurations and security operational procedures.

Independently troubleshoot and resolve complex security-related issues.

Support security configuration of network infrastructure, firewalls, VPNs and network segmentation.

Support Cisco Meraki and related network security technologies.

Assist with security-related network remediation and secure connectivity between offices and cloud/DR environments.

Network Security

Administer and maintain the EDR/MDR platform to ensure endpoint coverage, alert monitoring and timely escalation of identified security threats.

Ability to configure, maintain, upgrade and monitor the SIEM platform to ensure it remains operational, secure and appropriately sized.

Perform initial review, implement and maintain approved SIEM alerts, correlation rules, dashboards and notification configurations.

Perform review and validation of SIEM alerts and escalation suspected security incidents to appropriate management.

Compliance, Risk and Security Assessment

Ensure security systems, configuration and operational practices comply with organizational policies, regulatory requirements and applicable cybersecurity standards and frameworks

Assessment of hardware infrastructure and software platforms to ensure compliance with current security standards and projected lifecycle

Perform security risk threat assessments on new initiatives and projects

Develop implementation, testing, validation and rollback plans for infrastructure security changes.

Follow established change management processes for production changes.

Coordinate remediation activities with IT, Security, application teams and vendors.

Provide reporting on vulnerability remediation, patching, infrastructure lifecycle and outstanding risks.

Serve as a senior technical escalation resource…