Systems Security Specialist

Influxinfosys•Tallahassee, FL

About The Position

We are seeking an experienced Systems Security Specialist – SA5 to provide hands-on enterprise security engineering, security operations, email security administration, incident response, and threat-hunting support for a large enterprise environment. The consultant will serve as a primary hands-on administrator for assigned security technologies and will independently perform security platform configuration, administration, tuning, troubleshooting, investigation, documentation, threat hunting, and incident-response activities.

Requirements

7+ years of progressively responsible IT and cybersecurity experience in enterprise environments, including security engineering, security operations, endpoint security, identity security, cloud security, and messaging security.
4+ years of recent hands-on production experience with Palo Alto Cortex and Tanium, including Cortex for Endpoint and Tanium Comply Modules.
3+ years of recent hands-on enterprise email security experience with Proofpoint, Tessian, and Abnormal Security. Experience with each named technology is required.
3+ years of Microsoft Exchange Administrator experience, including Exchange Online, mail flow, transport rules, connectors, message tracing, anti-spam, anti-phishing, quarantine, and mail routing.
3+ years of hands-on security incident response experience covering alert triage, investigation, containment, eradication, recovery, root-cause analysis, and post-incident documentation.
2+ years of hands-on threat-hunting experience across endpoint, identity, email, network, and cloud telemetry.

Nice To Haves

Microsoft Defender
Palo Alto Cortex
Tanium
Proofpoint
Tessian
Abnormal Security
Exchange Online
Microsoft Entra ID/Azure AD
Conditional Access
MFA
Endpoint, Identity, Email, Network, Cloud telemetry
PowerShell
Alert triage, containment, eradication, recovery, RCA
SIEM/security telemetry, detection logic, indicators, automated response

Responsibilities

Administer and support enterprise security platforms including Microsoft Defender, Palo Alto Cortex, Tanium, Proofpoint, Tessian, and Abnormal Security.
Configure, tune, maintain, and troubleshoot security policies, rules, integrations, connectors, exclusions, allow/block lists, alerts, and automated security actions.
Monitor platform health, licensing, utilization, sensors/agents, integrations, data flow, and configuration drift.
Identify security control gaps, conflicting configurations, integration issues, and opportunities for security optimization.
Administer Microsoft Exchange Online and enterprise email security architecture.
Manage mail flow, transport rules, connectors, message tracing, quarantine, anti-spam, anti-phishing, impersonation protection, and domain controls.
Investigate phishing, business email compromise, malicious attachments/links, spoofing, account compromise, and anomalous email activity.
Coordinate security configuration and response activities across Exchange Online, Microsoft Defender, Proofpoint, Tessian, and Abnormal Security.
Monitor security queues and perform alert triage and incident response.
Investigate security alerts and incidents, determine scope and impact, collect/analyze evidence, and recommend containment actions.
Support endpoint isolation, indicator blocking, malicious email removal, account containment, policy changes, and evidence preservation.
Perform root-cause analysis and document incident chronology, findings, actions, residual risk, and corrective recommendations.
Respond to high-priority security incidents within established response-time requirements.