JOB DUTIES:
Under supervision of the IT manager, carry out Symantec DLP upgrades and patches; Setup, configure
and deploy ePO; Operational responsibility for endpoint management infrastructure; Oversee Security
tools DLP, SIEM, vulnerability scanner and penetrations test; Research, analyze, and respond to alerts,
including log retrieval and documentation; Monitor, maintain and update all corporate and production
computer systems network equipment and software applications; Deploy in Cloud and on-premises using
Amazon Web Services (AWS) and Single-Server Support; Oversee vulnerability assessment/penetration
testing of scoped systems and applications to identify system vulnerabilities; Use Network monitor in
SIEM IBM QRadar; FISMA, HIPAA and NIST Compliance usage; Use Splunk Security Manager to identify
threats and assign category; DLP architecture, rules and policies and implementation; Assist in creation of
end-to-end technology strategy for SIEM to address current and future security concerns, emerging
threats; Analyze security incidents vulnerability and penetration testing; Carry out network monitoring,
information and network security functions; Use QRadar architecture and implementation for enterprise
level; Design ePO DLP architecture; Understand business data, information bottleneck, and data conflicts;
Develop related business operations software troubleshooting; Develop new code to improve processes
and functionality of existing business data and information systems; Research, test, and resolve
defects/conflicts, and perform analysis to understand the exact nature of the proposed business system,
cost of developing or changing the system, risks and benefits, and engage in the project life cycle
development using various programming languages, database systems, testing tools, data warehousing
tools, and data modeling/reporting tools on multiple platforms; Delegate projects tasks and oversee IT
associates; Provide constant guidance and direction to project team members; Technologies used involve
End Point Security: McAfee Suite (VSE, HIPS & HDLP), McAfee MOVE AV; Vulnerability
Management Tools: QualysGuard, Nessus 7.0, Nmap, Nexpose, Wireshark; Security Tools: Splunk
ES, McAfee ePO, Nessus, Qualys, Solarwinds, Forescout, CyberArk, Solarwinds, Nexpose, Forcepoint,
Rapid7; Networking: LAN, WAN, Wi-Fi, DNS, WINS, DHCP, TCP/IP, ISCSI, Fiber, Firewalls/IPS/IDS;
Operating System: Windows, Linux, Unix; SIEM: Splunk, IBM Qradar, McAfee ASM; May perform some
or all of above tasks depending on scope of each project assignment; Work involves travel/relocation to
various unanticipated client sites across USA.
Bachelor's degree