Essential Functions

Perform incident response technical activities to minimize the impact to AmeriTrust.
Create specific protocols that monitor/audit file changes such as updates, deletion, additions and moving.
Monitor current security alerts to patch software such as operating systems with the latest versions
Perform risk analysis to identify any security issues that could lead to lost or stolen data.
Prevent intrusions using current security hardware and software.
Identify actual and potential security breaches and take action to stop them and prevent them.
Design and selection of the right software and hardware solutions for current and future network environments.
Define enterprise level security policies and actively enforce these procedures.
Train employees to understand security and implement the right strategies.
Work with law enforcement and vendors to manage security threats.

Knowledge, Skills And Abilities Required To Perform Essential Functions

A bachelor’s degree in computer science, management information systems, or related field required. Equivalent education, work experience, knowledge, and skills may qualify.
A minimum of two (2) years’ experience in the field of Information Security in an operations center; cloud environments experience preferred.
Ability to work towards Certified Information Systems Security Professional (CISSP) or GIAC Information Security Professional (GISP) designations preferred.
Strong experience using and knowledge of enterprise-class AV solutions (MS Windows Defender for Endpoints preferred).
Experience with event logging and security information and event management (SIEM) correlation engines.
Knowledge of next-gen firewall/proxy/WAF devices and email monitoring tools.
Familiarization with case management and cyber response tools.
Understanding of malware distribution and technical risk.
Ability to prioritize response activities based on intake queues and service level agreements (SLAs).
Ability to work across varying levels of technical competency to accurately communicate risk and mitigation activities.
Ability to clearly and effectively communicate Information Security matters to executives, auditors, and end users.
Familiarity with compliance frameworks (NIST, ITIL, FISMA, DOD, ISO).
Familiarity with IT audit processes such as PCI, ITGC, or SOX.
Experience with secure software development lifecycle preferred.

AmeriTrust Group, Inc.