Vulnerability Management 

Works with various technical leads and system/network administrators to better understand and mitigate risks in their environments. 

Identifies areas of risk in our and third-party systems that may lead to the possibility of being attacked or harmed and classifies these risks based on a wide variety of criteria such as risk ratings, criticality, availability of exploit code, ease of exploitation, results of a successful exploitation, required expertise etc. 

Remediates vulnerabilities by working with appropriate system and service owners to ensure they have a complete picture of where their risk exists and a reasonable plan to address these risks. 

Vulnerability Management 

Works with various technical leads and system/network administrators to better understand and mitigate risks in their environments. 

Identifies areas of risk in our and third-party systems that may lead to the possibility of being attacked or harmed and classifies these risks based on a wide variety of criteria such as risk ratings, criticality, availability of exploit code, ease of exploitation, results of a successful exploitation, required expertise etc. 

Remediates vulnerabilities by working with appropriate system and service owners to ensure they have a complete picture of where their risk exists and a reasonable plan to address these risks. 

Security Incident Response 

Acts as a first responder for detected system breaches and account compromises by assessing the situation and determining the appropriate points of follow-up or escalation 

Ensures forensic integrity and chain-of-custody is maintained for all analyzed media, devices and resources involved in a potential breach or compromise 

Provides technical security subject matter expertise to third party law enforcement agencies 

Act as the internal subject matter expert, working with both the business, and any third party security response companies as required. 

Security Infrastructure Management (Firewalls/VPN/IPS) 

Upgrades firewall and VPN operating systems and associated software to ensure current code releases and bug fixes are implemented 

Maintains the base configuration image and documentation for firewall and VPN deployments. 

Builds and develops custom threat signatures to keep pace with emerging threats as required 

Development and implementation of an Intrusion Prevention and Detection deployment, as well as third-party intelligence gathering technologies 

Education and Awareness 

Present on various security topics to a wide range of organizational audiences as required 

Liaison with other units, roles, and individuals throughout organization to develop effective security related training 

Other 

Participate in after-hours and weekend requests for assistance with security related duties 

Troubleshoots unexpected or unplanned outages and works with other members of IT to see the incident through to completion 

Other duties are assigned.