Job description

We are seeking a seasoned Cybersecurity Specialist with over 7 years of experience managing and securing large-scale environments using advanced tools and frameworks. The ideal candidate should be capable of working in a US Central Time Zone Shift, with strong communication, analytical, and documentation skills. This role involves ensuring robust network security, compliance with regulations, and effective incident response, utilizing industry-leading tools such as Fortinet, BitSight, Tenable, Splunk, Defender 360, and Palo Alto.

Key Responsibilities

Technical Expertise

1. Fortinet Products:
   • Advanced knowledge of FortiGate firewall: configuration, deployment, troubleshooting, and monitoring.
   • Experience with FortiManager and FortiAnalyzer for centralized management and log analysis.
   • Proficient in FortiSIEM integration with other security tools.
   • Expertise in designing, implementing, and managing firewall policies, NAT configurations, and VPNs (IPsec, SSL).
   • Deep understanding of threat prevention using features like IPS, application control, web filtering, antivirus, and sandboxing.
   • Managing VLAN, SD-WAN, and wireless security setups.
2. BitSight:
   • Monitor and manage cybersecurity risk ratings.
   • Analyze third-party risks and communicate findings to stakeholders.
   • Conduct security reviews for vendors, contractors, and partners.
3. Tenable:
   • Hands-on expertise in Tenable.io or Nessus for vulnerability scanning and management.
   • Prioritize vulnerabilities using risk-based approaches and generate actionable remediation plans.
   • Integrate Tenable with SIEM/SOAR tools for enhanced monitoring.
4. Splunk:
   • Configure and maintain Splunk for log aggregation, analysis, and correlation.
   • Develop advanced dashboards and automate workflows using Splunk SOAR.
   • Integrate Splunk with Fortinet, Tenable, and Defender 360 for centralized monitoring.
5. Microsoft Defender 360:
   • Manage and monitor Microsoft Defender for Endpoint and other ATP modules.
   • Configure threat detection rules and secure endpoint devices.
   • Leverage Defender’s threat intelligence to mitigate risks proactively.
6. Palo Alto:
   • Manage Palo Alto NGFWs, including App-ID, User-ID, and advanced threat prevention features like WildFire.
   • Implement Prisma Access/Cloud for hybrid cloud security.
   • Utilize Panorama for centralized policy management and reporting.

Professional Skills

1. Experience in Large-Scale Environments:
   • Expertise in handling complex, enterprise-grade security deployments.
   • Optimizing security configurations to reduce downtime and improve system performance.
2. Regulatory Compliance:
   • Ensure compliance with standards like GDPR, ISO 27001, PCI DSS, and HIPAA.
   • Conduct regular audits and assessments.
3. Incident Response:
   • Lead high-severity incident response efforts.
   • Perform root cause analysis and generate detailed reports.
4. Documentation:
   • Maintain thorough documentation of configurations, policies, and procedures.
5. Team Collaboration:
   • Work closely with IT, DevOps, and other stakeholders to implement secure systems.
   • Mentor junior team members and provide training on security best practices.

Advanced Expectations

• Security Automation: Design workflows using SOAR tools (Splunk SOAR, Microsoft Sentinel) to automate incident triage and remediation.
• Proactive Threat Intelligence: Leverage tools like BitSight and Defender 360 to monitor threat trends and mitigate third-party risks.
• Risk Assessment: Provide executive-level reporting on cybersecurity risks and mitigation strategies.

Soft Skills

• Strong analytical and problem-solving skills.
• Effective communication to explain complex security concepts to diverse stakeholders.
• A proactive attitude towards improving the security posture.

Preferred Certifications

• Fortinet: NSE Level 5 or higher.
• Tenable: Certified Nessus Auditor.
• Splunk: Core Certified Consultant.
• Microsoft Defender: Security Operations Analyst Associate.
• Palo Alto: PCNSE.
• General security certifications like CISSP, CEH, or CISM are highly desirable.

Work Environment

• Ability to work in a dynamic environment adhering to the US Central Time Zone Shift.
• Handle large-scale, enterprise-grade security solutions with precision and efficiency.

This role offers an excellent opportunity to grow and contribute to securing advanced systems in a collaborative and challenging environment.