At EMC, you'll put your skills to good use as an important member of our team. You can count on gaining valuable experience while contributing to the company's success. EMC strives to hire and retain the best people by engaging, developing and rewarding employees.
Develops, administers, and monitors controls for the security, integrity, and availability of enterprise systems, business information, and other sensitive information. Evaluates information systems and collaborates with security architecture and engineering on moderately complex security-related projects. Identifies, reports, and mitigates security incidents and addresses escalations. Configures and administers moderately complex cybersecurity systems. Collaborates with security teams and other IT teams to maintain system and security compliance as detailed by the IT Security Policy and corporate policies.
Essential Functions
- Serves as cybersecurity operations first escalation point of contact.
- Researches and resolves escalated moderately complex cybersecurity alerts and incidents, such as phishing and malware-related incidents, utilizing cybersecurity tools, including SIEM and SOAR.
- Escalates complex incidents to senior team members.
- Leads incidents response team and activities which involves meeting with Legal, IT, and other department leaders, based on security issue.
- Plans, coordinates, and executes regular incident response preparedness, including tabletop exercises.
- Maintains the incident response plans.
- Configures and administers moderately complex cybersecurity systems, including vulnerability management, SIEM detection and alert development, EDR detections and exclusions, SOAR playbooks, integrations and writing scripts and integrations.
- Verifies that adequate security controls and recovery requirements remain in effect as system changes are performed.
- Performs controls testing to ensure compliance with cybersecurity controls and standards.
- Collaborates with Cybersecurity Engineers to guide enterprise system administrators on routine to moderately complex cybersecurity issues and concerns.
- Develops vendor relationships, including understanding the roadmap of current tooling and emerging technologies of existing vendors.
- Works with Cybersecurity Engineers to review and resolve requests for exceptions to security controls and policies, ensuring adequate compensating controls are in place.
Education & Experience
- Bachelor’s degree in a computer related field or equivalent relevant experience
- Three years of experience in information security or related experience
- Security certifications (CySA+, CISSP, Security+, CEH) preferred
Knowledge, Skills & Abilities
- Strong knowledge of commonly used concepts, practices, and procedures within the field of information security
- Strong knowledge of SIEM and SOAR technologies
- Strong knowledge IPS/IDS rules and policies
- Good knowledge in one or more scripting languages, preferably Python
- Good knowledge of methods for protecting endpoints both cloud and on-premises
- Experience with vulnerability management and remediation and related security tools
- Experience with threat detection and response solutions
- Strong knowledge of enterprise system administration
- Excellent analytical and problem-solving abilities
- Excellent incident response skills including leading large group of various levels of the organization
- Excellent verbal and written communication skills
- Strong human relations and customer service skills
- Strong organizational and multi-tasking skills
Our employment practices are in accordance with the laws that prohibit discrimination due to race, color, creed, sex, sexual orientation, gender identity, genetic information, religion, age, national origin or ancestry, physical or mental disability, medical condition, veteran status, active military status, citizenship status, marital status or any other consideration made unlawful by federal, state, or local laws.
All of our locations are tobacco free including in company vehicles.
