146 applicantsPosted by Agency

Company

Original Job Post

InterEx Group · 2 days ago

Security Architect

United States

Contract

Remote

Senior Level

Wonder how qualified you are to the job?

Maximize your interview chances

Human ResourcesRecruiting

Insider Connection @InterEx Group

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Architect, implement, and support event management and logging solutions for the protection of Firm assets.

Integrate and connect disparate systems to achieve synergistic incident detection, reporting, and response outcomes.

Develop, maintain, and support key SOAR infrastructure, including toolsets, scripts, dashboards, and metrics.

Work closely with key constituents, such as SOC/IR, to deliver SOAR capabilities consistent with design requirements.

Provide input, create documentation, and review information security policies and procedures.

Utilize common security toolsets (SIEM, sniffer, IDS, etc) to identify issues and analyze compliance with existing policies and procedures.

Provide high quality, business-level reports to management.

Contribute to the Firm’s security-related information repositories (web, database, SharePoint).

Monitor and report on compliance with the Firm’s information security policies and procedures.

Monitor internal control systems to ensure appropriate information access levels and security clearances are maintained.

Stay abreast of the threat, capability, and technology landscape.

Report compliance failures to appropriate management for immediate remediation.

Participate in the definition of the organization’s IT disaster recovery and continuity plans for security event management systems.

Serve as an internal information security consultant and mentor regarding security event logging to the Security Team and other constituents by monitoring information security technologies and trends, providing expert guidance, and assisting with knowledge development/mentoring activities.

Serve as a 3rd-level support resource for the purposes of ticket resolution and change management activities.

Analyze, recommend, and implement controls as determined necessary by management.

Support Firm standard security applications, utilities, and processes. Utilize remote control and remote access software in the performance of duties.

Utilize standard security tools such as a SIEM, IDS and other event logging systems.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security ConceptsInformation Security FrameworksContract LanguageRisk Valuation ModelsSIEM/SOAR ConceptsIncident ResponseSecurity Event TelemetryThreat IntelligenceData CommunicationsSecure Coding PracticesEncryption TechnologiesBCP/DR ConceptsComputer Monitoring SystemsEndpoint Security ControlsTechnical Training DeliveryEnglish ProficiencyProblem-SolvingAdaptabilityCommunicationAnalytical ThinkingAttention to DetailIndependence

Required

Expert understanding of security concepts, technologies, controls, and best practices.

Working knowledge of information security frameworks such as ISO27001, NIST, and CIS.

Ability to synthesize contract language and convert such language to controls.

Authoritative understanding of security threats, qualitative and quantitative risk valuation models, and effective tools, tactics, and techniques for risk reduction.

Expert understanding of SIEM/SOAR concepts and toolsets, including how to architect, automate, and integrate effectively with Incident Response.

Masterful understanding of collecting and utilizing security event telemetry and threat intelligence sources to protect critical assets.

Authoritative understanding of data communications and information systems hardware and software.

Authoritative understanding of principles, theories, techniques, and methods of information system analysis and programming, particularly secure coding practices.

Thorough knowledge of data processing and data communications concepts and services.

Working knowledge of encryption technologies and standards, both at-rest and in-flight.

Familiar with BCP/DR concepts and practices.

Thorough knowledge of computer monitoring systems, endpoint security controls, vendor-supplied packaged programs, macros, utilities, and other highly technical programs.

Expert analysis skills, including the gathering and analyzing of facts, formulating objective conclusions modified by subjective and experience-based qualifiers when appropriate, defining problems, and promoting solutions.

Ability to adapt, integrate, and modify existing programs or vendor-supplied package programs for use with existing information systems.

Proficient in the delivery of training and informational sessions to technical and non-technical constituencies.

Proficient in oral and written English.

Ability to be productive and maintain focus without direct supervision.