CYBERSECURITY AND NETWORK OPERATIONS LEAD

branchgroup•Durham, NC

1d•Onsite

About The Position

The Branch Group is seeking a Cybersecurity and Network Operations Lead to help maintain and secure our organization’s network infrastructure and cybersecurity posture. This role combines hands-on technical administration with vendor oversight, ensuring our network and security services are delivered with accountability, strong service quality, and alignment to internal standards. In this position, you will partner with cross-functional teams to ensure systems and networks remain secure, compliant with applicable regulations, and protected against unauthorized access and emerging security risks. You will identify vulnerabilities, conduct risk assessments, develop and implement security solutions, and contribute to incident response, security monitoring, and policy development. This role is not a remote or hybrid role. This person will work from our Morrisville, NC office. Relocation is not being offered. Sponsorship is not available.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience).
Minimum of 3-5 years of experience in system security engineering, network security, or a related field.
Familiarity with security technologies, such as Cisco MXDR, Cisco Email Threat Defense, Cisco Duo, Cisco SASE, Cisco ISE, Cisco Umbrella, Cisco ASA / Firepower / Meraki devices.
Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls.
Hands-on experience with security technologies, such as firewalls, IDS/IPS, SIEM, antivirus, and vulnerability scanning tools.
Experience with risk assessment, penetration testing, and incident response methodologies.
In-depth understanding of TCP/IP, VLANs, VPNs, DNS, DHCP, and routing protocols.
Experience managing vendors or MSPs in a hybrid IT/security environment.
Strong analytical, troubleshooting, and documentation skills.
Strong communication and interpersonal skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders.

Nice To Haves

Cisco certifications: CCNP Security, CCNA Security, or equivalent.
Experience with SIEM tools, incident response, and endpoint protection platforms.
Familiarity with Microsoft 365 and Azure AD integration with Cisco security tools.
Experience in multi-site, hybrid network environments.

Responsibilities

Design, implement, and maintain secure systems and networks
Develop, maintain, and review information security policies, standards, and procedures in alignment with frameworks such as NIST CSF and CIS Controls
Lead and support enterprise risk management activities, including identifying, assessing, and tracking cybersecurity risks
Design and deliver security awareness and training programs
Perform control assessments and gap analyses to evaluate the effectiveness of existing security controls and recommend improvements
Recommend improvements to security monitoring, detection rules, logging coverage, and response processes
Oversee day-to-day cybersecurity operations across Cisco, Microsoft, and Meraki
Engage and oversee third-party providers to perform vulnerability assessments, penetration testing, and managed detection and response to identify and prioritize potential security risks and vulnerabilities
Act as the primary liaison between the company and network/security vendors. Define and track SLAs, review vendor performance, and ensure timely resolution of issues
Develop and implement security measures, policies, and procedures to protect systems and networks against unauthorized access, data breaches, and other security incidents
Conduct security audits and assessments to ensure compliance with applicable regulations, industry best practices, and organizational security policies
Collaborate with cross-functional teams to ensure that security requirements are incorporated into system and network design, development, and implementation processes
Provide technical expertise and guidance to IT and internal business teams
Stay updated on the latest security threats, technologies, and industry trends, and provide recommendations for improving security posture
Participate in incident response activities, including investigation, containment, and recovery efforts, as needed
Produce regular reports on security incidents, network uptime, and vendor performance metrics
Maintain detailed records of network configurations, incidents, and change management activities