Senior IT Security Specialist

Electric Mind•New York City, NY

About The Position

Electric Mind is hiring a Senior IT Security Specialist to protect its networks, endpoints, applications, and cloud environments, and maintain compliance with the frameworks relied on by the business and its clients. The role owns day-to-day security operations across firewalls, intrusion prevention, wireless, email, and endpoint protection, and leads vulnerability testing and compliance programs. This is a hands-on senior role involving direct configuration and tuning of security controls, mentoring junior staff, and advising leadership on risk. The specialist will work within Electric Mind’s Technology Practice, which designs and implements secure, scalable technology solutions for client transformations.

Requirements

5 to 10 plus years of experience in IT security, with significant time in security and compliance roles.
Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems.
Practical experience securing enterprise WiFi networks.
Experience administering DLP, antivirus/endpoint protection, and anti-spam/email security platforms.
Experience deploying and supporting 2FA/MFA solutions.
Ability to perform penetration testing and run SAST and DAST tools, interpret results, and drive remediation.
Working knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, or PCI DSS, and audit preparation.
Solid understanding of TCP/IP, routing, VPNs, Active Directory/identity management, and Windows and Linux systems.
Clear written and verbal communication skills, including the ability to explain risk to non-technical audiences.
Degree or diploma in Computer Science, Information Security, or a related field, or equivalent experience.

Nice To Haves

Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates, security policy, and threat prevention profiles.
Cloud security knowledge in AWS, Azure, or Google Cloud, including identity and access management, network security groups, logging, and cloud security posture management (CSPM).
Experience with ITIL change management standards.
Familiarity with SIEM platforms and log correlation.
Experience with DevSecOps practices and embedding security in CI/CD pipelines.
Exposure to zero trust architecture and secure remote access.
One or more certifications: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), or a cloud security certification such as AWS Security Specialty, Azure Security Engineer (AZ-500), or CCSP.

Responsibilities

Deploy, manage, and tune next-generation firewalls, including reviewing rules, managing segmentation, and controlling changes.
Operate and tune intrusion prevention systems, investigate alerts, and reduce false positives.
Secure enterprise WiFi, including WPA3/802.1X authentication, rogue access point detection, and guest network isolation.
Administer antivirus and endpoint protection (EPP/EDR) across servers and workstations, and respond to detections.
Manage anti-spam and email security controls, including phishing filtering, SPF, DKIM, and DMARC.
Own data loss prevention policies across email, endpoints, and cloud storage, and handle policy incidents.
Manage rollout, enforcement, and exceptions for two-factor and multi-factor authentication.
Plan and conduct penetration tests, and coordinate and scope third-party penetration tests.
Integrate SAST and DAST application security testing into development pipelines.
Triage security findings with development teams, track remediation, and verify fixes.
Maintain controls and evidence for compliance frameworks and applicable privacy laws.
Prepare for and support internal and external audits, client security questionnaires, and risk assessments.
Write and update security policies, standards, and procedures.
Participate in incident response, including investigation, containment, and post-incident reviews.
Mentor junior team members and deliver security awareness training.
Report security posture, metrics, and risks to IT leadership.