Cybersecurity Professional – Security Tools & Analytics

Electrosoft•Atlanta, GA

3d•$130,000 - $150,000

About The Position

Electrosoft Services, LLC is seeking an experienced Cybersecurity Professional – Security Tools & Analytics to administer, engineer, integrate, automate, and support enterprise cybersecurity tools and infrastructure platforms. The ideal candidate will have strong hands-on experience with endpoint security, asset intelligence/CAASM, SIEM, scripting and automation, API integrations, infrastructure troubleshooting, and security compliance. This role involves collaborating with various teams to resolve technical issues, leading tool implementations, and gathering requirements for technical specifications and solutions. The position also requires maintaining technical documentation and applying security hardening standards.

Requirements

Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, Information Security, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.
Approximately 8+ years of experience in cybersecurity, information security, security engineering, infrastructure engineering, or related IT disciplines.
Current professional security certification such as CISSP, CISM, ISSEP, or equivalent/higher-level certification.
Hands-on experience with enterprise security technologies, including CrowdStrike and preferably Armis and/or Axonius.
Experience with Elastic Stack/Elastic SIEM or comparable SIEM/security analytics platforms.
Strong scripting and automation skills using Python, BASH/Shell, Perl, JavaScript, or similar languages.
Experience with REST APIs, system integrations, and security automation.
Strong command-line administration and troubleshooting skills, with knowledge of network fundamentals and LAN/WAN troubleshooting.
Strong analytical, problem-solving, communication, documentation, and collaboration skills.
Ability to work independently, support cross-functional teams, and participate in a 24/7/365 on-call rotation.

Responsibilities

Administer, engineer, maintain, and troubleshoot enterprise security tools and infrastructure platforms, including CrowdStrike, Armis, Axonius, and Elastic Stack/Elastic SIEM.
Support endpoint security, asset discovery and CAASM, security analytics, dashboards, monitoring, reporting, policies, integrations, and platform health.
Develop and maintain integrations using REST APIs, Python, BASH/Shell, Perl, JavaScript, and related technologies.
Automate security and infrastructure administration, monitoring, reporting, and operational processes.
Perform command-line administration, configuration, O&M, and troubleshooting of security infrastructure, servers, applications, APIs, and network connectivity.
Collaborate with Security, Infrastructure, Network, Server, and Operations teams to resolve technical issues and improve platform performance.
Lead or support security tool implementations, upgrades, migrations, integrations, and enhancement initiatives.
Gather technical and business requirements and develop technical specifications, workflows, implementation plans, and solutions.
Track project requirements, dependencies, risks, issues, schedules, and action items.
Evaluate existing processes and systems and identify opportunities for automation, optimization, and integration.
Maintain technical documentation, system designs, configurations, procedures, runbooks, and service records.
Apply security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
Provide technical leadership and mentoring to junior team members.