https://www.linkedin.com/jobs/view/2657961825/?refId=9dd2f831-671c-41c4-9200-175c75b5a431

Information Security Specialist

Suvoda

Romania, Europe

About the job: We are Looking for an Information Security Specialist to Join Our Team! At Suvoda, we are not only passionate about the work that we do and the impact that it has on human lives, but we are passionate about the people who make it happen! Every day, it is our priority to bring in talented and motivated individuals and create a workplace that drives, engages and retains them. Responsibilities: Assess, review and administer firewalls, Palo Alto PAN-OS experience strongly preferred. Work with Managed Service Provider to address SIEM logging and alerting requirements. Review escalated security alerts, provide deep investigative support as required. Manage and perform internal and external vulnerability scanning tests. Evaluate and manage vulnerability and audit remediation items to ensure timely resolution. Conduct system baseline validations to identify operating system Deficiencies. Monitor, configure and maintain enterprise security systems, software and devices as required. Research, demo and recommend new security technologies to help the company stay current with industry trends and best practice security posture recommendations, deploy solutions. Perform security checks to ensure company data security and policy adherence is in aligned with audit and client requirements. Foster open communication with internal IT teams to maintain the ongoing relationship as it pertains to enterprise information security. Keep up to date on security industry best practices, frameworks, standard and trends, pursue relevant security certifications. Provide proactive feedback to management concerning potential problems and recommendations for improvement. Maintain a proactive approach to all information security matters in relation to managing information security related systems. Requirements: Bachelors Degree within Information Security, Cyber Security, or Computer Engineering preferred, or related experience and training Required. One or more of the following security certifications or equivalent experience desired: Cisco, CompTIA Security +, GIAC, Microsoft, Qualys, Palo Alto PCNSA\PCNSE preferred. Ability to be adaptable, flexible, and change activities quickly according to business needs. Prior experience in a regulated industry. Experience with SOC 2 Preferred. Must be critical thinker with strong technical skills with the ability to prioritize and troubleshoot issues, while providing attention to detail in a fast-paced global Information security environment. Must be able to learn new technology and applications quickly. Strong understanding of the criticality of Information Security and the impact to internal and external business functions. Excellent communication and interpersonal skills. Ability to listen, communicate (written and verbal). Ability to effectively interact with all staffing levels, both internally and externally. Ability to effectively work virtually in a diverse international team in a multi-tasked environment. Strong attention to detail. Experience: At least 3 years of IT Security experience required. Experience in a large enterprise or corporate environment is preferred. Hands-on experience with a vulnerability management platform, such as such as Qualys Cloud, performing scans and providing remediation guidance and tracking. Hands-on experience with a SIEM platform. Hands-on experience with next generation firewalls. Strong knowledge of security technologies and tools such as MDM, DLP, PAM, vulnerability testing tools, Anti-virus and anti-malware products, next generation firewalls, and other relevant information security related solutions. Strong knowledge of and commitment to deep learning of Palo Alto PAN-OS is highly desired. Strong knowledge and understanding of networking, TCP/IP network protocols, ports, concepts and practices. Knowledge of Microsoft Active Directory, Windows Server\Desktop Operating Systems, MacOS. Knowledge and understanding of Google Drive, Office 365. Knowledge of AWS Cloud Security Best Practices. Knowledge and understanding of security frameworks and controls found in NIST 800-53, NIST Cybersecurity framework, ISO 27001\2, CIS 20. 