What are the responsibilities and job description for the Information Security Technician position at EarthSoft?
As an Information Security (IS) Technician, you are a member of the EarthSoft IT Team helping with the implementation, maintenance, and improvement of information security across EarthSoft including internal operations, product development, and EQuIS Online hosting. EQuIS is the premier environmental and geotechnical data management system in the world. Your tasks will be both reactive (monitoring information security systems, responding to incidents, etc.) and proactive (implementing additional security tools and configurations, assisting with compliance audits, etc.). Some activities may require scheduling flexibility (e.g., performing certain tasks outside normal business hours, occasionally being “on call” for urgent issues).
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.
This job description is intended to provide a general overview of the position and does not encompass all tasks that may be assigned.
Responsibilities (what you do):
- Provide technical assistance and implementation to support ongoing information security compliance initiatives for various frameworks (including SOC 2, ISO 27001, FedRAMP, CMMC, and others).
- Coordinate with other IT and IS staff to ensure that security tools and processes are implemented and configured to comply with established policies and procedures.
- Implement, maintain, and improve security tools and configurations with company’s Microsoft Office 365 and Microsoft Azure environments (both internal and hosting environments).
- Coordinate with the Product Department to implement and improve our secure software development life cycle (SAST, DAST, penetration tests, vulnerability scans, dependency review, threat modeling, etc.).
- Assist with the selection and implementation of regular company-wide and team-specific security trainings.
- Assist with responses to external security questionnaires.
- Monitor and manage company security tools (including GRC and SIEM system(s)).
- Respond to information security incidents promptly and appropriately.
- Assist with technical/security review of new vendors and contractors.
- Assist with other IT and/or IS tasks as needed.
Required Skills and Experience (what you need/have):
- Ability to research, troubleshoot, and resolve issues using a variety of resources and tools
- Ability to use critical thinking and creative problem-solving skills
- Ability to communicate with others accurately and professionally in high-stress situations
- Willingness to learn and apply the learned information to perform assigned tasks
- Able to work independently and adapt to different situations and assignments
- Adaptability
- Ability to manage and prioritize multiple tasks simultaneously, with input from team members and/or Manager as needed
- 5 years of experience working with a variety of software applications, computer and networking hardware, information security, and/or in the IT industry
- Some flexibility in work schedule by performing certain tasks outside of normal business hours
- Experience with Microsoft Azure services (with an emphasis on security tools and services)
- Experience with information security controls, frameworks, and audits
- Experience with information security software, services (GRC, SIEM, etc.), and techniques
- Experience with common software/Internet vulnerabilities (e.g., OWASP) and mitigations
- Experience with modern scripting tools and techniques (including PowerShell)
- Bachelor degree in information security, cyber security, computer science, or related field
Compensation: Commensurate upon Experience
Principals only. Recruiters please don’t contact this job poster.
Please, no phone calls about this job!
To apply, please send your resume and cover letter to resumes@earthsoft.com