Description

Essential Duties and Responsibilities:
• Assist in establishing a mature and optimized Security Operations Center discipline to support managed security services focused on client-facing vulnerability and security information event management engagements.
• Identify and remediate infrastructure and application vulnerabilities identified in continuous scanning utilizing best of breed security tools.
• Respond to clients in a timely manner (within documented SLA) with thorough and concise analysis and recommended actions.
• Document actions in cases to effectively communicate information to internal/external stakeholders and for historical purposes.
• Willing to work flexible hours to support clientele in a monthly shift rotation.
• Ability to produce professional client facing technical documentation and presentations
• Desire to work in a SOC, Service Delivery, or Architecture team on a long-term basis.
• Utilize analytics to identify potential vulnerabilities and threats to the environment.
• Detect, respond, mitigate, and report on cyber threats/incidents that may impact the environment.
• Assist with information sharing within the team, willing to mentor and collaborate openly.
• The ability to work independently to identify errors, pinpoint root causes, and devise solutions with minimal oversight.
• Must have a high attention to detail, and a customer first attitude.
• Desirable Skills/Experience:
• Hands-on real-world experience working with modern day security platforms such as
• Cisco CSW (Tetration), Secure Endpoint, Umbrella, Cloudlock, Secure Malware Analytics, Duo, Secure Network Analytics, Identify Services Engine (ISE)
• Illumio security solutions
• Kenna Security
• Thousand Eyes
• Prior experience in a professional service, consulting firm, or agency highly preferred

Education and Experience:
• Bachelors Degree in a related business or technical discipline, or the equivalent combination of education, technical training, or work/military experience.
• Fundamental networking skills specifically around Cisco network technologies
• Fundamental skills in scripting / automation tools Python, Ansible, Terraform etc.
• 5+ years working in a Security Operations or Engineering role

ATSG is equal employment opportunity provider