This position will serve as a point of initial escalation for other IT teams who need policy tuning, diagnostic, or other assistance with SI security tools. This person must maintain a strong familiarity with our full stack of security technologies. The person must also have strong familiarity with industry-standard tools for troubleshooting network connectivity, process execution, and file permissions. This person will also be responsible for continuously improving our suite of troubleshooting documents, SOPs, and support tools so that the IT support teams are able to self-resolve/diagnose.

Responsibilities:

Provide timely support for IT teams where security technologies may be a contributing factor to the issue
Review tickets and change requests for risk and to identify security policies that will need to be tuned. Collect necessary details to propose policy changes
Continuously improve our knowledge transfer and information sharing with other IT teams
Make operational policy changes to security tools

Minimum Qualifications:

Systematic thinking – the ability to take a complex sequence of events and isolate the critical/relevant stages.
Excellent interpersonal skills – the ability to engage with both end users and IT colleagues to understand a problem and determine fact patterns
Understanding of:
TCP/IP and related tools (e.g., interpreting packet captures)
TLS handshakes and HTTP
X509 certificates
DNS
Access control lists (especially Windows)
Active Directory
Experience with:
Excel for ad-hoc analysis. Must be comfortable aggregating disparate sets of logs and other data for unified analysis
Packet captures for basic troubleshooting
Web application troubleshooting
Endpoint Detection and Response tools
Application Control tools
Native security controls in the Microsoft stack (OS, Office, Edge)
Ability to write practical audience-relevant documentation related to troubleshooting

Preferred Qualifications:

Familiarity with ;

CyberArk Endpoint Privilege Manager
Zscaler Internet Access
CrowdStrike Falcon process tracing (CrowdStrike, particularly process/event tracing
Kerberos, OAuth, SAML and other authentication protocols
Cloud infrastructure
Ability to write ad hoc queries using one or more of the following:
Splunk
Powershell
Regular expressions
SQL

Salary Range: $80,000 - $120,000 Actual compensation for this role will depend on several factors including the cost of living associated with your work location, your qualifications, skills, competencies, and relevant experience.

At Sompo International, we recognize that the talent, skills, and commitment of our employees drive our success. This is why we offer competitive, high-quality compensation and benefit programs to eligible employees.

Our compensation program is built on a foundation that promotes a pay-for-performance culture, resulting in higher incentive awards, on average, when the Company does well and lower incentive awards when the Company underperforms. The total compensation opportunity for all regular, full-time employees is a combination of base salary and incentives that gets adjusted upfront based on overall Company performance with final awards based on individual performance.

We continuously evaluate and update our benefit programs to ensure that our plans remain competitive and meet the needs of our employees and their dependents. Below is a summary of our current comprehensive U.S. benefit programs:

Two medical plans to choose from, including a Traditional PPO & a Consumer Driven Health Plan with a Health Savings account providing a competitive employer contribution.

Pharmacy benefits with mail order options.

Dental benefits including orthodontia benefits for adults and children.

Vision benefits.

Health Care & Dependent Care Flexible Spending Accounts.

Company-paid Life & AD&D benefits, including the option to purchase Supplemental life coverage for employee, spouse & children.

Company-paid Disability benefits with very competitive salary continuation payments.

401(k) Retirement Savings Plan with competitive employer contributions.

Competitive paid-time-off programs, including company-paid holidays.

Competitive Parental Leave Benefits & Adoption Assistance program

Employee Assistance Program

Tax-Free Commuter Benefit

Tuition Reimbursement & Professional Qualification benefits

Sompo International is an equal opportunity employer committed to a diverse workforce. M/F/D/V

Visit our website at www.sompo-intl.com

Sompo

New Jobs

Security Analyst II (R1830)