Security Admin Tier 1

Carlisle Construction Materials•Scottsdale, AZ

5d•Onsite

About The Position

The Information Security Administrator is responsible for supporting technical, operational, and procedural controls that protect confidentiality, integrity, and availability of information based on business requirements and risk analysis. This role is part of the Global Security Operations team and supports Carlisle's proactive security posture across the enterprise. The position is onsite in Scottsdale, AZ, and may require occasional travel up to 25%.

Requirements

Knowledge of architecture and system hardening techniques.
Understanding of network protocols, common services, network vulnerabilities, and network attack patterns.
Broad technical knowledge of server, desktop, and mobile operating systems.
Experience with security and vulnerability management tools found in large network environments.
Experience with remote access solutions, including solutions for mobile devices.
Experience with encryption, anti-virus, and patch management technologies.
Experience monitoring key infrastructure elements, identifying security events, performing analysis, and initiating response activities, including documentation and escalation as appropriate.
Knowledge of industry security standards, including NIST, ISO, and CMMC2.
Experience performing risk analysis and managing security and technology controls.
Excellent written and oral communication skills, including the ability to communicate security concepts to technical and non-technical audiences.
Strong decision-making capabilities, with the ability to evaluate costs and benefits of potential actions and identify appropriate solutions.
Team-oriented approach with the ability to work effectively with diverse stakeholders.
Ability to complete tasks by established deadlines and balance competing demands and priorities.
Self-starter who takes initiative and requires minimal supervision.
Bachelor's degree in Computer Science, Information Systems, another related field, or equivalent job experience.
Minimum of two years of relevant experience, such as firsthand experience as a security administrator, network administrator, system administrator, or similar role.
Possess or obtain an industry certification, such as CompTIA Security+, within six months of hire, paid for by Carlisle.

Nice To Haves

Desired education level - Bachelor's degree in Computer Science
Desired experience level – 5yrs
Desired certifications – already have a Security+ cert or equivalent

Responsibilities

Administer and maintain up to five security tools and/or applications.
Analyze successful and unsuccessful breaches of security controls, determine root cause, and support remediation efforts.
Manage day-to-day tickets and break/fix requests.
Assist with and support escalation of verified security events and incidents from analysts.
Create and maintain global security documents, including procedures and guidelines for identities, endpoints, data, applications, and infrastructure; devise methods to measure their effectiveness.
Provide periodic assistance to internal and external auditors, including timely control evidence, clarification of processes, and participation in interviews related to technologies performing controls.
Assist team members with security tools, report creation, and resolution of security issues.
Report unresolved network security exposures, misuse of resources, and noncompliance.
Manage and maintain external assets and review dark web datasets.
Manage the Microsoft security platform, including Azure Conditional Access Policies, named locations, privileged roles, Intune, and Microsoft Defender platforms.
Perform threat and vulnerability assessments.
Provide remote access platform design, configuration, and support.
Assist and train Carlisle employees in becoming and remaining compliant with Information Security Policies and Standards, including support for security training content.
Research and participate in the selection of innovative technologies that protect against data loss; assist with configuration and deployment of such tools.
Assist in the development of security awareness communications, including quarterly newsletters.
Monitor phishing simulation platform.
Stay current with modern technology and adapt it to improve the security posture.
Provide guidance and mentorship to Cybersecurity Analysts.
Perform other duties as assigned.