Information Security Specialist-2
Core
Configuring, deploying, and managing security technologies including NextGen SIEM, SOAR, EDR, and cloud security tools to handle incidents and enforce Zero Trust policies.
Role type
Senior IC Information Security Specialist
Builds
Security playbooks, correlation rules, dashboards, workflows, and compliance mappings for cloud groups/accounts
Domain
Cybersecurity, Cloud Security, SOC Operations
Required skills
NextGen SIEM/SOAR/EDR, Linux/Windows administration, API integration, Zero Trust policy configuration, compliance framework mapping (CIS/NIST/PCI-DSS/SOC2/HIPAA), CrowdStrike administration, Qualys (CASM/Policy Compliance), container security, Python scripting, firewall/IPS/IDS/Proxy management, log collection (Syslog/DB API), security incident response
Preferred skills
Cloud certifications (AWS/AZURE/GCP), Security certifications (AZ-500/SC-200/Security+/CEH/CISSP/CISM)
Technologies
NextGen SIEM, SOAR, EDR, CrowdStrike, Qualys, Falcon Privileged Access, Linux, Windows, Python, Syslog, AD logs
Responsibilities
Create and maintain Zero Trust and conditional access policies; Configure compliance benchmarks for cloud groups; Troubleshoot security agent deployment and system performance; Create IOA/IOC/ML exclusions and block IOCs; Manage non-human and privileged access control; Deploy passive network sensors and cloud connectors
Seniority
Senior, hands-on IC