The Opportunity
The SecOps position works closely with the Application Analyst and Security Analyst teams to setup, configure, implement, and maintain the security of applications, systems, networks, and environments. This position will perform assessment, mitigation, and remediation for identified vulnerabilities. All vulnerabilities are required to be addressed during a specific timeline set based on severity.
SecOps participate in security audits, such as Payment Card Industry (PCI) Compliance and Service Organization Control (SOC) audits by collecting and submitting evidence to auditors. SecOps must always practice due care and due diligence in their job role.
Primary Responsibilities
Review and secure software configurations ensuring the proper security controls are present
Secure and administer dedicated and cloud-based Linux, Windows, and Mac servers, ensuring the proper security requirements are present
Secure and administer dedicated and cloud-based networks ensuring the proper security controls are present
Troubleshoot complex application, system, service, and network issues.
Research, Assess, Mitigate, Remediate, Validate and Report on identified vulnerabilities.
Evaluate and report on risk to various teams and management
Implement, review, and provide guidance on access controls for applications, systems, services, and networks
Support security audits for internal resources, partners and third parties
Provide guidance on security best practices
Create and maintain technical documentation for security processes, tasks, and network infrastructure
Coordinate patching and security maintenance schedule with various teams
SSL Certificate management
Assist with auditing security controls
Perform assessment, mitigation, and remediation for identified vulnerabilities. All vulnerabilities are required to be addressed during a specific timeline set based on severity.
Qualifications
Bachelor’s Degree in Computer Science or a related field
1+ years server/network administration experience
Computer security experience preferred
Knowledge of Linux and Windows
Knowledge of industry compliance and privacy standards is a plus (NIST, PCI, GDPR, CCPA, etc)
Knowledgeable in security best practices, industry security standards and related auditing requirements.
Other Skills And Experience
Communicate clearly and effectively with global teams
AWS Certification is a plus
Certification is a plus (Security+, CISSP, CCSP, CISA, etc).
Any Graduate