Southwest Research Institute
IT SPECIALIST - SR. IT SPECIALIST - Cybersecurity
Southwest Research Institute, San Antonio, Texas, United States, 78208
IT SPECIALIST - SR. IT SPECIALIST - Cybersecurity
SwRI Cybersecurity Operations’ mission is to secure the enterprise by evaluating, implementing, and operating a full suite of cybersecurity tool and services. We are responsible for configuring, administering, and supporting network and endpoint security systems. Operations include firewalls, intrusion prevention and operational incident detection and response and security orchestration and automation. From policy, through assessment and implementation, to operations and response, candidates will have the opportunity to engage in the full security lifecycle
Objectives of this Role: Provide cybersecurity analysis and support in an Enterprise environment. Maintain cybersecurity infrastructure and provide daily analysis and support for cybersecurity operations. Recommend, evaluate, and deploy new cybersecurity technology and capabilities. Support vulnerability and threat assessment operations.
Daily and Monthly Responsibilities: Monitoring and maintaining endpoint protection and response (EDR) and Security Orchestration, Automation and Response (SOAR) systems. Monitoring and maintaining the Enterprise Vulnerability Management and Penetration Testing programs. Participate in daily review of alerts and incident response analysis activities. Remote Access configuration and user support. Perform malware analysis as needed. Monitoring and management of cyberthreat intelligence feeds to include integration into various security platforms to identify indicators of compromise to enrich alerting.
Requirements: Requires a Bachelors in Cybersecurity, IT Operations, or related with related experience. In Lieu of a degree 5 years of Cybersecurity or IT administration experience and related certifications will be considered. 3 years: Relevant Cybersecurity or IT administration experience. 3-7 years: Experience working with network security platforms such as Endpoint Protection, Threat Intelligence. 3-7 years: Experience with administration of modern operating systems (e.g.- Windows Server, Windows Desktop and Linux). Experience with network fundamentals (TCP/IP, Vlans and network subnetting) as well as scripting, development, and utilizing application programing interfaces (API). A valid/clear driver's license is required.
Special Requirements: Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.
Job Locations: San Antonio, Texas For benefits information at our San Antonio location, click here . For benefits information at all other locations, click here .
An Equal Employment Opportunity Employer: race, color, religion, sex, national origin, disability, and veteran status.
#J-18808-Ljbffr
Objectives of this Role: Provide cybersecurity analysis and support in an Enterprise environment. Maintain cybersecurity infrastructure and provide daily analysis and support for cybersecurity operations. Recommend, evaluate, and deploy new cybersecurity technology and capabilities. Support vulnerability and threat assessment operations.
Daily and Monthly Responsibilities: Monitoring and maintaining endpoint protection and response (EDR) and Security Orchestration, Automation and Response (SOAR) systems. Monitoring and maintaining the Enterprise Vulnerability Management and Penetration Testing programs. Participate in daily review of alerts and incident response analysis activities. Remote Access configuration and user support. Perform malware analysis as needed. Monitoring and management of cyberthreat intelligence feeds to include integration into various security platforms to identify indicators of compromise to enrich alerting.
Requirements: Requires a Bachelors in Cybersecurity, IT Operations, or related with related experience. In Lieu of a degree 5 years of Cybersecurity or IT administration experience and related certifications will be considered. 3 years: Relevant Cybersecurity or IT administration experience. 3-7 years: Experience working with network security platforms such as Endpoint Protection, Threat Intelligence. 3-7 years: Experience with administration of modern operating systems (e.g.- Windows Server, Windows Desktop and Linux). Experience with network fundamentals (TCP/IP, Vlans and network subnetting) as well as scripting, development, and utilizing application programing interfaces (API). A valid/clear driver's license is required.
Special Requirements: Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.
Job Locations: San Antonio, Texas For benefits information at our San Antonio location, click here . For benefits information at all other locations, click here .
An Equal Employment Opportunity Employer: race, color, religion, sex, national origin, disability, and veteran status.
#J-18808-Ljbffr