What are the responsibilities and job description for the Cybersecurity Specialist 3 position at BizTek People, Inc. | APA International Placement Consultants?
seeking a Cloud
Security Engineer to support cloud security initiatives and
ongoing cybersecurity programs. This role will focus on securing Azure
environments, automating security processes, and supporting enterprise security
monitoring.
Scope
The scope includes
working with members of the IT&S (Information Technology and Services)
Department to:
- Reduce
fragmentation across multiple remote access tools, creating consistent
controls, deduplicating capabilities, and reducing operational complexity
-- Configure Azure
Cloud Application Security Broker (CASB)
-- Evaluate and
secure other access methods in the context of CASB
-- Review
vulnerabilities, triage issues, and partner with technology and business teams
to drive remediation
-- Ensure secure
design, deployment, and documentation for applications and services
-- Collaborate with
other technology teams and business units on secure remote access practices
- Extend automation capabilities to define, prioritize, and develop standardized
incident response activities
-- Configure Azure
score manager to track historical score data
-- Automate log
collection from new Azure subscriptions
-- Normalize Event
Hub log collection
-- Automate baseline
security configuration and utility deployment using Ansible
- Scripting KPI and
metrics collection and presentation
- Develop new
integrations and vulnerability related alerts in Splunk
Deliverables
- Documentation
-- Architectural
Review Board (ARB)
-- Technical Review
Board (TRB)
-- Change Management
Review Board (CMRB)
-- Change Advisory
Board (CAB)
-- Other
documentation as required (e.g., for audits and inspections, updates to
standards and procedures, etc.)
- Consult with
project team and other stakeholders, e.g., IT practitioners, the Cybersecurity
and Compliance teams, Enterprise Architecture, Applications, Infrastructure,
Network, Database, OCM, etc. during testing and implementation.
Requirements
- 4 years of
practical application security experience.
- 2 years of
practical information security experience.
- Practical
experience using Security Information and Event Management (SIEM) tools to
sort, analyze, view, and report on data.
- Knowledge of
technology protocols and security concepts.
- Industry
cybersecurity and technology certifications are a plus.
- Experience working
in a regulated utility environment is a plus.
- Experience working
in a remote, cross functional team, with the ability to drive the scope of
work.
- Ability to lead
work effort with little day to day supervision. Ability to work through
ambiguity and escalate issues to maintain project momentum.
- Excellent
interpersonal skills, including collaboration, facilitation, and negotiation.