Cybersecurity Administrator

NAES•Issaquah, WA

2d•Onsite

About The Position

The Cybersecurity Administrator is responsible for maintaining the security posture of NAES by administering the Cybersecurity systems while monitoring, detecting, and responding to security incidents and threats. Investigate alerts, analyze the impact, and coordinate the appropriate response. Assist in identifying, assessing, and prioritizing vulnerabilities within NAES.

Requirements

Bachelor’s Degree in Information Security with 2-3 years of security related experience; or related field with 5 years of equivalent experience
Three years of cybersecurity experience.
CompTIA Security+, Microsoft Security Certified, and/or CISSP
Administration of Cybersecurity Systems – Familiarity of navigating and configuring Cybersecurity systems such as MDR portals, EDR portals, VMs, Networks, VLANs, Azure portal, Microsoft Security Portal, etc.
Incident Response - Ability to respond to security incidents, including identification, containment, eradication, and recovery.
Threat Detection and Analysis - Proficiency in using security information and event management (SIEM) tools to analyze logs and detect anomalies. Knowledge of threat intelligence sources and how to apply them to identify potential threats.
Vulnerability Management - Skills in conducting vulnerability assessments and penetration testing. Familiarity with tools for scanning and remediating vulnerabilities.
Malware Analysis - Knowledge of malware types, behaviors, and analysis techniques. Ability to analyze and respond to malware incidents.
Security Tools and Technologies - Proficiency in using various security tools, such as antivirus software, endpoint detection and response (EDR) solutions, and data loss prevention (DLP) tools.
Security Frameworks and Standards - Familiarity with security frameworks (e.g., CIS, NIST, ISO 27001) and compliance regulations (e.g. JSOX). Understanding of best practices for security governance and risk management. Understanding of cloud security principles and practices, especially in platform for Microsoft Azure.
Forensics and Investigation - Skills in digital forensics and evidence collection. Knowledge of investigation techniques and tools for analyzing security incidents. Ability to communicate effectively with technical and non-technical stakeholders. Skills in documenting incidents, creating reports, and presenting findings.
Analytical Thinking - Strong problem-solving skills to analyze complex security issues and develop effective solutions.
Attention to Detail - Ability to notice subtle changes or anomalies in data that may indicate security threats.
Team Collaboration - Skills in working collaboratively with other IT and security teams to enhance overall security posture.
Continuous Learning - Commitment to staying updated on the latest security trends, threats, and technologies through ongoing education and training.

Nice To Haves

Scripting and Automation
Cloud Security Knowledge
Security Architecture
Understanding Compliance and Regulatory Knowledge
Risk Management Skills
Advanced Threat Hunting
Public Speaking and Presentation Skills

Responsibilities

Administer Cybersecurity Systems: maintain and/or make changes to the Cybersecurity systems of NAES Corporation under the direction of the Cybersecurity manager.
Monitor Cybersecurity Systems: Continuously monitor security alerts and logs from various security tools and systems to identify potential threats and vulnerabilities.
Incident Response: Respond to security incidents by investigating alerts, analyzing the impact, and coordinating the appropriate response actions to mitigate risks.
Threat Analysis: Conduct threat intelligence analysis to understand emerging threats and vulnerabilities and recommend measures to enhance security.
Incident Management: Investigate security breaches and incidents, conducting root cause analysis and implementing corrective actions to prevent future occurrences.
Vulnerability Management: Assist in identifying, assessing, and prioritizing vulnerabilities within the organization's systems and applications, and support remediation efforts.
Collaboration: Work closely with IT, compliance, and other departments to ensure a unified approach to security and to address any security-related concerns.
Documentation and Reporting: Maintain detailed documentation of security incidents, investigations, and responses, and provide regular reports to management on security metrics and trends.
Security Policy Enforcement: Help develop and enforce security policies, procedures, and best practices to ensure compliance with industry standards and regulations.
Training and Awareness: Participate and help facilitate security awareness training programs for employees to promote a culture of security within the organization.