IT SPECIALIST - SR. IT SPECIALIST - Cybersecurity at Southwest Research Institute in San Antonio, Texas

Job Description:

Who We Are:


SwRI Cybersecurity Operations' mission is to secure the enterprise by evaluating, implementing, and operating a full suite of cybersecurity tool and services. We are responsible for configuring, administering, and supporting network and endpoint security systems. Operations include firewalls, intrusion prevention and operational incident detection and response and security orchestration and automation. From policy, through assessment and implementation, to operations and response, candidates will have the opportunity to engage in the full security lifecycle


Objectives of this Role:

• Provide cybersecurity operations support in an Enterprise environment.


• Maintain cybersecurity infrastructure and provide daily analysis and support for cybersecurity operations.


• Recommend, evaluate, and deploy new cybersecurity technology and capabilities.

Daily and Monthly Responsibilities:

• Monitoring and maintaining Next Generation firewall systems and policies.


• Support and management of L3/L7 Load-balancing and Web Application Firewall (WAF).


• Support and management of Privileged Access Management (PAM) solution.


• Support and management of the Enterprise Security Information Event Management (SIEM) solution to include advanced reporting, data analysis and correlation.


• Remote Access configuration and user support.


• Participate in daily incident response analysis activities as required.


• Support Identity Provider Services (IDP) and multi-factor authentication (MFA).


• Support and configure security for Microsoft O365 Entra ID cloud services.

Requirements:

• Requires a Bachelors degree in Cybersecurity, IT Operations, or related with related experience. In lieu of a degree 5 years of Cybersecurity and/or IT administration experience and related certifications.


• 3 years: Relevant Cybersecurity and/or IT administration experience with a bachelor's Degree.


• 3-7 years: Experience working with incident response and/or network security platforms such as Endpoint Protection, Threat Intelligence, Security Orchestration Automation and Response.


• 3-7 years: Experience with administration of modern operating systems (e.g.- Windows Server, Windows Desktop and Linux). • Experience with network fundamentals (TCP/IP, Vlans and network subnetting) as well as scripting, development, and utilizing application programing interfaces (API)


• A valid/clear driver's license is required.

Special Requirements:


Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.


Job Locations: San Antonio, Texas


For benefits information at our San Antonio location, click here.
For benefits information at all other locations, click here.

An Equal Employment Opportunity Employer: race, color, religion, sex, national origin, disability, and veteran status. Apply Now