Cybersecurity Subject Matter Expert - Managed Services

Redwood Software

About The Position

Red River is seeking a highly skilled and experienced Cybersecurity subject matter expert, to join our Managed Services team. As a SME in our business, you will play a critical role in managing, implementing and documenting cybersecurity solutions for our clients. This will include a focus on security across hardware, software, and the tools we use in the delivery of high-quality security services. Your goal will be exceptional customer satisfaction. The SME will work closely with Red River Professional Services, Design Architects, Sales, Partner SIEM vendors, to manage security systems (hardware, software, tools, etc.) for Red River’s growing customer base. The successful candidate will have experience managing and maintaining cybersecurity solutions tailored for unique environments including cloud, local, and wide-area infrastructure and/or networks systems which feature a wide variety of platforms and protocols. This position has a high potential for recognition as we continue to build our cybersecurity practice at Red River Technology.

Requirements

Bachelor's degree in a related field (Cybersecurity, Information Technology, etc.)
10 or more years of experience in cyber security
Industry certifications such as ITILv4, Security+, Network+, CISSP, CISM, CEH, or similar. Vendor MSSP certifications such PCDRA, ZCSS
Proven experience in designing and implementing security solutions, including firewalls, IDS/IPS, SIEM, and endpoint protection
Strong knowledge of security best practices, compliance standards, and industry regulations
Skilled communicator with presentation skills and the natural ability to explain complex concepts in a clear and concise manner, whether it’s to technical or non-technical audiences.
Strong leadership and team management skills
Experience working with clients and delivering security services within an MSSP or MSP environment.
Expertise in security incident response and vulnerability management
Ability to work in a fast-paced and dynamic environment, meeting client needs and deadlines
Understanding of Zero Trust methodologies
Must have some knowledge of Cybersecurity Maturity Model Certification (CMMC)
Experience deploying and managing NGFW and SASE solutions from OEMs such as Zscaler, Palo Alto Networks (Prisma Access, Prisma Cloud, XDR, XIAM), Cisco/Meraki, Crowdstrike (Threat Hunting), Microsoft (Defender, O365, Intune), Cylance, Webroot
Scripting experience with PowerShell
Experience with LogicMonitor and other monitoring systems
Security clearance highly desirable, ability to obtain a government security clearance required
U.S. Citizenship Required

Nice To Haves

Working Knowledge of one or more of the following cybersecurity standards would be preferable. NIST SP 800-171, NIST SP 800-53, and ISO 27001

Responsibilities

Proactive planning and policy setting with a knack for analyzing vulnerabilities, devising creative solutions to protect systems and data from threats and the intent of limiting client and Red River exposure during security incidents and emergencies. Demonstrated capability and experience in thinking one step ahead with the ability to anticipate risk and vulnerabilities.
Calming influence with experienced, fact-based advice and decisions that inspires team and client confidence during cyberattack and incident response.
A deep knowledge of cybersecurity practices, tools and technologies is required to lead, mentor, and guide a team of security professionals, providers, and client team members through network security, encryption methods and incident response.
Liaison between Managed Service, Professional Services, and Design Engineering to help in service creation and overall security practice growth
Collaborate with clients to understand their security requirements and design tailored security solutions, including firewall configurations, intrusion detection and prevention systems, endpoint protection, and more
Oversee the deployment and configuration of security solutions, ensuring they meet client objectives and adhere to industry best practices
Lead the incident response team in identifying and mitigating security incidents and breaches. Develop and execute incident response plans to minimize impact and prevent reoccurrence
Implement and manage security information and event management (SIEM) systems to monitor and analyze security events. Configure alerting and reporting for unusual activities
Collaborate with clients to develop security policies, procedures, and best practices to enhance overall security posture.
Oversee vulnerability assessments and penetration testing activities. Work with clients to remediate vulnerabilities and improve security defenses.
Ensure that clients' security environments meet relevant compliance requirements and industry standards. Assist in audits and compliance assessments
Maintain strong client relationships, providing regular updates, status reports, and addressing security concerns and inquiries
Ability to provide detailed and accurate metrics/reporting to customers on a regular basis to ensure that Red River is meeting the customers cyber security needs
Provide leadership, coaching, and mentorship to product, system and tool engineers. Manage team performance, scheduling, and project allocation