About the role
Essential Functions:
- Configures, maintains, and optimizes assigned security platforms across endpoint, network, web, email, cloud, and identity domains. - Continuously refines policies, detection logic, and configurations to improve signal quality, reduce false positives, and enhance visibility. - Applies platform capabilities to develop and improve detection coverage (e.g., IOA, behavioral detection). - Ensures platform health, telemetry integrity, and effective coverage across environments - Evaluates and implements enhancements to improve effectiveness of existing tools prior to recommending new solutions. - Analyzes alerts and raw telemetry generated by security platforms and determines appropriate action based on context and risk. - Investigates suspicious activity using available data sources, including logs, network traffic, and endpoint behavior. - Applies independent judgment to distinguish between benign, anomalous, and malicious activity. - Perform triage and root cause analysis, escalating when broader coordination is required. - Contributes to incident response through multi-platform analysis and insight. - Troubleshoots and resolves issues related to security controls, including access disruptions, false positives, and policy conflicts. - Applies practical, risk-based decisions when adjusting controls to balance security with operational needs. - Collaborates with IT, engineering, and business teams to diagnose and resolve issues efficiently - Develops working knowledge across multiple security domains to support team resiliency and continuity coverage. - Serves as a secondary resource across security platforms including endpoint, email, vulnerability, and cloud. - Collaborates with peers to ensure continuity of coverage and reduce single points of failure - Identifies gaps in detection, visibility, and control effectiveness based on operational experience. - Improves detection quality, reduces noise, and enhances response effectiveness (e.g. MTTD/MTTR). - Contributes to development of playbooks and processes, remaining effective in situations where such guidance is incomplete. - Implements automation or scripting where appropriate to improve efficiency. - Communicates findings, risks, and recommendations clearly to technical and non-technical stakeholders - Translates technical observations into business-relevant impact. - Demonstrates strong active listening and incorporates differing perspectives. - Maintain a collaborative, solutions-oriented approach while providing clear recommendations and direction. - Participate in on-call rotation for after-hours response. - Respond to security incidents and production-impacting issues in a timely and structured manner. - Communicates important security developments, escalations, and activities to appropriate management personnel. - Serves as a mentor and provides training to other team members. - Recommends regulatory and industry best practice framework for security operational. - Conducts industry research on new and emerging security technologies to ensure security solutions exhibits high levels of performance. - Collaborates with other departments to ensure security is embedded throughout organizational processes. - Participates in technical audits to ensure compliance with security policies and other industry standards. - Participates in the creation and maintenance of security documents. - Performs other related duties and projects as business needs require at direction of management.
Education and Experience:
- Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or related field. - Minimum eight (8) years of experience in information security network security, infrastructure security or any equivalent education and/or experience from which comparable knowledge, skills and abilities have been demonstrated/achieved. - Experience in zScaler or Darktrace preferred - Experience with security platforms such as the following, required:
- - Network detection and response (NDR) - Secure web gateway / SSE platforms - Endpoint, cloud, or identity security tools
Pay Range: $145,000.00 - $173,000.00/yr
Text as published by Glidewell Dental. We don't edit postings; apply and ask questions on the employer's site.