Lead Cybersecurity
About The Position
Protect products, services, infrastructure, networks, and applications by implementing robust security measures, monitoring for threats, responding to incidents, and supporting innovation and strategic planning to safeguard data and assets for the company, customers, and vendors. Continuously monitor for security threats, vulnerabilities, and breaches, and promptly respond with incident response, vulnerability detection, and cyber intelligence measures. Develop, implement, and maintain security policies and procedures to protect systems and data, manage security incidents through root cause analysis, containment, and recovery. Perform risk assessments and analyze complex security issues to develop mitigation strategies, supporting forward-looking research, planning, and innovation in cybersecurity. Provide technical support and troubleshooting for security-related issues, work closely with IT and business units to integrate security measures and support various cyber-related projects. Support the critical threat analytics platform efforts of AT&T CSO. The position will fill a critical role in helping the threat platforms remain current with necessary data sources required for threat analytics. The position fills a critical gap in data verification, onboarding, validation and verification across security data coverage of the network perimeter and Enterprise assets contributing to security investigations and response activity. Areas of work typically include: cyber incident response, cyber product testing, cyber risk & strategic analysis, cyber research, cyber awareness & training, cyber vulnerability detection & assessment, cyber intelligence & investigation, cyber networks & systems engineering, cybersecurity application testing, cyber digital forensics & forensics analysis, cyber software assurance, cyber application development & testing, cyber IoT planning & testing, cyber policy & requirements & standards. Utilize Splunk/SIEM and UNIX configuration in one of the following areas: IT Operations, compliance, dev ops, network security, and system security, supporting security event management tools (SIEMs). Connect with Azure and AWS hosted applications and databases. Use rule and advanced logic creation within SIEM and XDR tools. Troubleshoot experience on any SIEM Tool and Enterprise Monitoring Solutions.
Requirements
- Bachelor’s degree, or foreign equivalent degree in Computer Science, Information Science, or Cybersecurity.
- Five (5) years of progressive, post-baccalaureate experience in the job offered or a related occupation.
- Experience utilizing Splunk/SIEM and UNIX configuration in one of the following areas: IT Operations, compliance, dev ops, network security, and system security.
- Experience supporting security event management tools (SIEMs).
- Experience connecting with Azure and AWS hosted applications and databases.
- Experience using rule and advanced logic creation within SIEM and XDR tools.
- Troubleshooting experience on any SIEM Tool and Enterprise Monitoring Solutions.
Responsibilities
- Implement robust security measures, monitor for threats, and respond to incidents.
- Support innovation and strategic planning to safeguard data and assets.
- Continuously monitor for security threats, vulnerabilities, and breaches.
- Respond promptly with incident response, vulnerability detection, and cyber intelligence measures.
- Develop, implement, and maintain security policies and procedures.
- Manage security incidents through root cause analysis, containment, and recovery.
- Perform risk assessments and analyze complex security issues to develop mitigation strategies.
- Support forward-looking research, planning, and innovation in cybersecurity.
- Provide technical support and troubleshooting for security-related issues.
- Work closely with IT and business units to integrate security measures and support cyber-related projects.
- Support critical threat analytics platform efforts.
- Ensure threat platforms remain current with necessary data sources for threat analytics.
- Fill a critical gap in data verification, onboarding, validation, and verification across security data coverage.
- Contribute to security investigations and response activity.
- Utilize Splunk/SIEM and UNIX configuration in IT Operations, compliance, dev ops, network security, or system security.
- Support security event management tools (SIEMs).
- Connect with Azure and AWS hosted applications and databases.
- Use rule and advanced logic creation within SIEM and XDR tools.
- Troubleshoot experience on any SIEM Tool and Enterprise Monitoring Solutions.
Benefits
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
