Sr. Security Admin

About the Job

• Deploy and maintain security sensors and tools
• Administrating the AV and deep security for end points
• Monitoring all security logs with the cooperate.
• Monitor security FWs and review logs/threats to identify intrusions
• Use high-level scripting/programming language to extract, de-obfuscate, or otherwise manipulate malware related data
• Work directly with cyber threat intelligence analysts to convert intelligence into useful detection
• Collaborate with incident response team to rapidly build detection rules as needed
• Identify incident root cause and take proactive mitigation steps with the network security team.
• Review vulnerabilities and track resolution
• Develop and implement detection use cases
• Develop and implement IDS/IPS signatures
• Assist with incident response efforts
• Create and brief customer reports
• Participate in on-call rotation for after-hours security and/or engineering issues
• Perform customer security assessments