IT Security Administrator

Forte•Eden Prairie, MN

About The Position

The IT Security Administrator provides direct security support to FORTÉ employees, IT staff, and key stakeholders by monitoring, protecting, and improving the organization’s security posture. The role delivers Tier 2 security support, investigates security incidents, and supports ongoing security operations, awareness, and compliance initiatives. The position covers security operations and incident response, vulnerability and endpoint management, identity and access management, security awareness and training, projects and continuous improvement, customer-focused support, communication and reporting, and teamwork. It includes monitoring security tools, investigating and remediating incidents, coordinating vulnerability remediation, supporting identity controls, educating users, maintaining documentation, and communicating security risks and status to stakeholders.

Requirements

Experience with secure email gateways, secure web gateways, EDR, and SIEM tools.
Experience with security awareness training and privileged access technologies.
Experience with Microsoft Defender.
Hands-on experience administering and monitoring Microsoft Defender XDR and related Microsoft security products to identify, investigate, and remediate threats across endpoints, identities, email, and cloud workloads.
Experience with vulnerability scanning.
Knowledge of CIS and NIST frameworks.
Experience administering Microsoft and Cisco Systems.
Understanding of networking fundamentals, including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP.
Ability to explain complex concepts in simple terms.

Nice To Haves

CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA, or equivalent industry certifications are preferred but not required.

Responsibilities

Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email security platforms.
Investigate and remediate phishing, malware, and other security incidents.
Maintain and improve secure email and web gateway controls.
Provide Tier 2 security escalation support and resolve incidents.
Review vulnerability scans and penetration test results.
Coordinate vulnerability remediation and patching with Systems Administrators.
Participate in the organization’s vulnerability management program and maintain awareness of emerging threats and vulnerabilities.
Support MFA and zero trust identity solutions.
Assist with password management tools and access reviews.
Perform quarterly terminated-user audits and annual access reviews.
Secure shared and privileged account credentials.
Conduct quarterly phishing simulations, deliver security awareness campaigns and new-hire training, and educate employees on security best practices and emerging threats.
Participate in IT and cross-functional security projects.
Ensure compliance with organizational policies and standards, and recommend updates to security policies, procedures, and controls.
Create and maintain security documentation and knowledge base content.
Provide timely, professional, customer-focused security support to internal and external stakeholders.
Communicate security issues, risks, and remediation steps clearly and effectively.
Partner with business units and customers to understand requirements and align security solutions accordingly.
Balance security risk and operational needs while maintaining a service-oriented mindset.
Document security incidents, investigations, and remediation activities according to organizational procedures.
Prepare clear, accurate reports and summaries for IT leadership, management, auditors, and other stakeholders.
Communicate security status, risks, and trends through regular reporting and ad hoc briefings as needed.
Maintain timely and professional communication during incidents, projects, and security initiatives.
Cross-train with IT team members, document systems and processes, secure shared account credentials, and perform peer documentation reviews.