IT Cybersecurity and Cloud Specialist

Cohu•San Diego, CA

1d•Onsite

About The Position

Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security. Responsible maintaining the IT Risk Assessment; including identifying areas where business groups should consider additional investment and areas IT internal audit should focus. These include: Triage and resolve alerts to identify malicious activity and identify Indicators of Compromise (IOCs) Perform pre- and post- implementation reviews of IT system implementations or enhancements. IT security audits (e.g. network, operating system and data center), including evaluating if security vulnerabilities are properly identified and mitigated. Coordinate the scope and performance of these reviews as necessary with business units and external security experts. Evaluate general computing controls and provide value added feedback. Test compliance with those controls. Perform various other reviews of IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate. Assist in administration of Microsoft 365 Defender for Cloud and various other security products. Responsible for assisting with audit efforts and ensuring compliance with corporate OT security standards. Assist in administration of security platforms (Vulnerability management, Endpoint Protection, etc..) Escalate problems / Identify risks (as appropriate) to IT Management. Evaluate existing business solution migration opportunities and work as part of a team to migrate to an appropriate cloud based solution. Assist in administration of Microsoft System Center Service Manager systems Contribute to cloud-based team projected centered around SharePoint Online, Exchange Online, PowerApps, and PowerBI. Record, track and document the service desk request problem-solving process, including all successful and unsuccessful decisions made, and actions taken, through to final resolution. Alert management to emerging trends in risks and incidents. Develop/Update support documents and FAQ sheets Reinforce project and service level agreements to manage end-user expectations. Provide end-user support when required. Provide management with metrics and SLA reports when required. Other duties as assigned.

Requirements

BS degree in IT or computer science or related field required; will consider candidates with AS degree and/or equivalent college coursework.
Minimum of Security+ and/or Cloud+ certificate.
Certified in a Microsoft 365 service such as Microsoft SharePoint / Power Platform.
5+ years of experience in IT in a 500+ user environment with multiple locations.
Experience in IT auditing.
Security Information and Event Management Toolset knowledge
Experience with Microsoft 365 and Azure
Experience with Active Directory administration
Experience with service desk ticketing software
Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences
Knowledge of internal auditing, internal controls and risk management
Familiarity with finance and accounting practices and methods
Comprehensive understanding of internal control environments within the IT function
Experience with multiple technology domains including aspects of Windows, Unix and/or database administration, software development and networking
Working understanding of Microsoft 365 services
Ability to work in a team environment
Proactive, hands-on, results-driven orientation required.
Ability to blend exceptional attention to detail with an ability to retain strategic direction within a rapidly evolving entrepreneurial business culture
Ability to produce high quality work products for both the IT groups and Senior Management.

Nice To Haves

PowerShell Scripting a plus

Responsibilities

Triage and resolve alerts to identify malicious activity and identify Indicators of Compromise (IOCs)
Perform pre- and post- implementation reviews of IT system implementations or enhancements.
Perform IT security audits (e.g. network, operating system and data center), including evaluating if security vulnerabilities are properly identified and mitigated.
Coordinate the scope and performance of IT security audits as necessary with business units and external security experts.
Evaluate general computing controls and provide value added feedback.
Test compliance with controls.
Perform various other reviews of IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.
Assist in administration of Microsoft 365 Defender for Cloud and various other security products.
Assist with audit efforts and ensuring compliance with corporate OT security standards.
Assist in administration of security platforms (Vulnerability management, Endpoint Protection, etc..)
Escalate problems / Identify risks (as appropriate) to IT Management.
Evaluate existing business solution migration opportunities and work as part of a team to migrate to an appropriate cloud based solution.
Assist in administration of Microsoft System Center Service Manager systems
Contribute to cloud-based team projects centered around SharePoint Online, Exchange Online, PowerApps, and PowerBI.
Record, track and document the service desk request problem-solving process, including all successful and unsuccessful decisions made, and actions taken, through to final resolution.
Alert management to emerging trends in risks and incidents.
Develop/Update support documents and FAQ sheets
Reinforce project and service level agreements to manage end-user expectations.
Provide end-user support when required.
Provide management with metrics and SLA reports when required.
Other duties as assigned.