IT Security Administrator

FORTÉ•Eden Prairie, MN

2d•$75,000 - $100,000

About The Position

The IT Security Administrator provides direct security support to FORTÉ employees, IT staff, and key stakeholders by monitoring, protecting, and improving the organization’s security posture. The role delivers Tier 2 security support, investigates security incidents, and supports ongoing security operations, awareness, and compliance initiatives. The administrator monitors and responds to security alerts, investigates and remediates incidents, supports vulnerability and endpoint management, and assists with identity and access management. The role also delivers security awareness training, contributes to IT and cross-functional projects, maintains security documentation, and communicates security issues, risks, and remediation steps to internal and external stakeholders. FORTÉ is a 100% employee-owned company, formerly AVI Systems, with more than 50 years of experience. The company offers a comprehensive benefits package, including healthcare coverage, retirement savings and ownership programs, learning support, and paid time off.

Requirements

Experience with secure email gateways, secure web gateways, EDR, and SIEM tools.
Experience with security awareness training and privileged access technologies.
Experience with Microsoft Defender.
Hands-on experience administering and monitoring Microsoft Defender XDR and related Microsoft security products to identify, investigate, and remediate threats across endpoints, identities, email, and cloud workloads.
Experience with vulnerability scanning.
Knowledge of CIS and NIST frameworks.
Experience administering Microsoft and Cisco systems.
Understanding of networking fundamentals, including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP.
Ability to explain complex concepts in simple terms.

Nice To Haves

CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA, or equivalent industry certifications are preferred but not required.

Responsibilities

Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email security platforms.
Investigate and remediate phishing, malware, and other security incidents.
Maintain and improve secure email and web gateway controls.
Provide Tier 2 security escalation support and resolve incidents.
Review vulnerability scans and penetration test results; coordinate remediation and patching with Systems Administrators.
Participate in the organization’s vulnerability management program and maintain awareness of emerging threats and vulnerabilities.
Support MFA and zero-trust identity solutions, password management tools, and access reviews.
Perform quarterly terminated-user audits and annual access reviews; secure shared and privileged account credentials.
Conduct quarterly phishing simulations, deliver security awareness campaigns and new-hire training, and educate employees on security best practices and emerging threats.
Participate in IT and cross-functional security projects; help ensure compliance with organizational policies and standards.
Recommend updates to security policies, procedures, and controls, and create and maintain security documentation and knowledge base content.
Provide timely, professional, customer-focused security support to internal and external stakeholders; communicate risks and remediation steps clearly and partner with business units and customers to align security solutions with requirements.
Document security incidents, investigations, and remediation activities; prepare reports and summaries for IT leadership, management, auditors, and other stakeholders.
Communicate security status, risks, and trends through regular reporting and ad hoc briefings, maintaining timely and professional communication during incidents, projects, and security initiatives.
Cross-train with IT team members, document systems and processes, and perform peer documentation reviews.