Worksighted is one of the fastest growing IT consulting firms in Michigan. We work hard, but we don't take ourselves too seriously. We are committed to growth, both our customers' and our own. As a team, we know we're only as good as the values we stand for and the hard work we put in every day. Joining our team means being a unique piece to the puzzle and a superhero in your own right. From crucial benefits like paid maternity and paternity leave to in-office parties and impromptu field trips, our employees know how much we appreciate them. Learn more about our values and what it's like to be a member of our team on our website or by following us on Instagram @Worksighted.

POSITION SUMMARY:

This role will be responsible for supporting the full life cycle of cyber security operations. Security analysis and incident response is essential for supporting daily operations along with growing our current security operations environment. The Security Specialist position is responsible for identifying and prioritizing potential threats, creating or recommending new prevention or detection methodologies, managing the incident response and monitoring functions, as well as continuously improving security operations strategy and process.

ESSENTIAL RESPONSIBILITIES:

1. Perform security monitoring and incident response.
2. Manage Security Essentials on a  day to day basis (primarily ATP, MFA, Dark Web, and Knowbe4 etc…).
3. Manage escalation of security events; assist with such events as needed and make recommendations to correct or prevent future incidents.
4. Maintain and follow Incident Response procedure and help develop new processes around security.
5. Manage multiple, simultaneous security initiatives and responses.
6. Monitor security audit logs and access control practices to ensure adherence to policies and procedures for customers on contract security agreements.
7. Provide regular reporting on current state of information security program to senior management.
8. Liaise with relevant internal departments and external agencies as needed to ensure clients maintain a strong security posture.
9. Work with Network Engineers in the Professional and Managed Services team to audit, monitor and validate security, including conducting gap analysis and other comprehensive internal assessments of existing systems to improve the security infrastructure and mitigate risks.
10. Provide security training for other team members.
11. Provide input on the architecture and engineering of new security systems as part of Tech Stack updates; including the evaluation of technical designs.

EDUCATION & EXPERIENCE:

• Degree in Computer Science/MIS/Telecommunications or related field.
• A minimum of 3 years IT information security related experience.

OTHER KNOWLEDGE, SKILLS & ABILITIES:

• Strong knowledge of common security management frameworks, such as ISO/IEC 27001, NIST and CSA.

• Strong technical skills.

• Excellent communication, people, and organization skills.

• Strong ability to convey security information to non-technical end-users in a way that inspires adoption and adherence to all IT and Board security policies and programs.

• Knowledge of information security frameworks, capability-maturity models.

• Ability to effectively prioritize and execute tasks in a transformation environment.