IT Cybersecurity and Cloud Specialist

Cohu•San Diego, CA

6h•Onsite

About The Position

This role is responsible for providing guidance on IT risk management, particularly concerning application and infrastructure security. The specialist will maintain the IT Risk Assessment, identify areas for investment, and focus IT internal audit efforts. Key responsibilities include triaging and resolving security alerts, performing implementation reviews, conducting IT security audits, evaluating general computing controls, and reviewing IT management policies such as change management, business continuity, and information security. The role also involves assisting in the administration of Microsoft 365 Defender for Cloud and other security products, supporting audit efforts, and ensuring compliance with corporate OT security standards. Additionally, the specialist will help administer security platforms, escalate issues, evaluate cloud migration opportunities, assist with Microsoft System Center Service Manager, contribute to cloud-based projects, manage service desk requests, alert management to emerging risks, develop support documentation, reinforce project and service level agreements, provide end-user support, and generate metrics and SLA reports. Other duties as assigned.

Requirements

BS degree in IT or computer science or related field required; will consider candidates with AS degree and/or equivalent college coursework.
Minimum of Security+ and/or Cloud+ certificate.
Certified a Microsoft 365 service such as Microsoft SharePoint / Power Platform.
5+ years of experience in IT in a 500+ user environment with multiple locations.
Experience in IT auditing.
Security Information and Event Management Toolset knowledge.
Experience with Microsoft 365 and Azure.
Experience with Active Directory administration.
Experience with service desk ticketing software.
Experience with network infrastructure.
Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.
Knowledge of internal auditing, internal controls and risk management.
Familiarity with finance and accounting practices and methods.
Comprehensive understanding of internal control environments within the IT function.
Experience with multiple technology domains including aspects of Windows, Unix and/or database administration, software development and networking.
Working understanding of Microsoft 365 services.
Ability to work in a team environment.
Proactive, hands-on, results-driven orientation required.
Ability to blend exceptional attention to detail with an ability to retain strategic direction within a rapidly evolving entrepreneurial business culture.
Ability to produce high quality work products for both the IT groups and Senior Management.

Nice To Haves

Experience with PowerShell Scripting a plus

Responsibilities

Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security.
Maintain the IT Risk Assessment, including identifying areas where business groups should consider additional investment and areas IT internal audit should focus.
Triage and resolve alerts to identify malicious activity and identify Indicators of Compromise (IOCs).
Perform pre- and post- implementation reviews of IT system implementations or enhancements.
Conduct IT security audits (e.g. network, operating system and data center), including evaluating if security vulnerabilities are properly identified and mitigated.
Coordinate the scope and performance of IT security audits with business units and external security experts.
Evaluate general computing controls and provide value added feedback.
Test compliance with general computing controls.
Perform various other reviews of IT management policies and procedures such as change management, business continuity planning/ disaster recovery and information security to ensure that controls surrounding these processes are adequate.
Assist in administration of Microsoft 365 Defender for Cloud and various other security products.
Assist with audit efforts and ensuring compliance with corporate OT security standards.
Assist in administration of security platforms (Vulnerability management, Endpoint Protection, etc..).
Escalate problems / Identify risks (as appropriate) to IT Management.
Evaluate existing business solution migration opportunities and work as part of a team to migrate to an appropriate cloud based solution.
Assist in administration of Microsoft System Center Service Manager systems.
Contribute to cloud-based team projected centered around SharePoint Online, Exchange Online, PowerApps, and PowerBI.
Record, track and document the service desk request problem-solving process, including all successful and unsuccessful decisions made, and actions taken, through to final resolution.
Alert management to emerging trends in risks and incidents.
Develop/Update support documents and FAQ sheets.
Reinforce project and service level agreements to manage end-user expectations.
Provide end-user support when required.
Provide management with metrics and SLA reports when required.
Perform other duties as assigned.