Senior IT Security Specialist

Electric Mind • New York, NY

3d

About The Position

Electric Mind is hiring a Senior IT Security Specialist to protect its networks, endpoints, applications, and cloud environments and maintain compliance with relevant business and client frameworks. This hands-on senior role owns day-to-day security operations across firewalls, intrusion prevention, wireless, email, and endpoint protection, while leading vulnerability testing and compliance programs. The specialist configures and tunes security controls, guides junior staff, and advises leadership on risk.

The role covers network and perimeter security; endpoint, email, and data protection; application security and testing; compliance and risk; and security operations and leadership. The specialist participates in incident response, supports internal and external audits, maintains security documentation and evidence, and reports on security posture, metrics, and risks to IT leadership.

Requirements

• 5 to 10+ years of experience in IT security, with significant experience in security and compliance roles.
• Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems.
• Practical experience securing enterprise Wi-Fi networks.
• Experience administering DLP, antivirus/endpoint protection, and anti-spam/email security platforms.
• Experience deploying and supporting 2FA/MFA solutions.
• Proven ability to perform penetration testing and run SAST and DAST tools, interpret results, and drive remediation.
• Working knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, or PCI DSS, and audit preparation.
• Solid understanding of TCP/IP, routing, VPNs, Active Directory/identity management, and Windows and Linux systems.
• Clear written and verbal communication, including the ability to explain risk to non-technical audiences.
• Degree or diploma in Computer Science, Information Security, or a related field, or equivalent experience.

Nice To Haves

• Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates, security policy, and threat prevention profiles.
• Cloud security knowledge in AWS, Azure, or Google Cloud, including identity and access management, network security groups, logging, and cloud security posture management.
• Experience with ITIL change management standards.
• Familiarity with SIEM platforms and log correlation.
• Experience with DevSecOps practices and embedding security in CI/CD pipelines.
• Exposure to zero trust architecture and secure remote access.
• One or more certifications: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE, AWS Security Specialty, Azure Security Engineer (AZ-500), or CCSP.

Responsibilities

• Deploy, manage, and tune next-generation firewalls, including rule reviews, segmentation, and change control.
• Operate and tune intrusion prevention systems, investigate alerts, and reduce false positives.
• Secure enterprise Wi-Fi, including WPA3/802.1X authentication, rogue access point detection, and guest network isolation.
• Administer antivirus and endpoint protection across servers and workstations, and respond to detections.
• Manage anti-spam and email security controls, including phishing filtering, SPF, DKIM, and DMARC.
• Own data loss prevention policies across email, endpoints, and cloud storage, and handle policy incidents.
• Run two-factor and multi-factor authentication rollout, enforcement, and exception management.
• Plan and conduct penetration tests, and coordinate and scope third-party penetration tests.
• Integrate static and dynamic application security testing into development pipelines.
• Triage application security findings with development teams, track remediation, and verify fixes.
• Maintain controls and evidence for frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, and applicable privacy laws.
• Prepare for and support internal and external audits, client security questionnaires, and risk assessments.
• Write and update security policies, standards, and procedures.
• Participate in incident response, including investigation, containment, and post-incident reviews.
• Mentor junior team members and deliver security awareness training.
• Report on security posture, metrics, and risks to IT leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed