Job Description:

Key Role Description

The Cybersecurity Administrator role is to ensure the security and integrity of the corporate server infrastructure and enterprise environment. This is achieved by planning, designing, and developing cybersecurity procedures and programs. In addition, the Cybersecurity Administrator will participate in the installation, monitoring, maintenance, support, and optimization of all hardware, software, and related technologies. This individual will also analyze and resolve hardware and software security issues in a timely and accurate fashion.

Role Specific Competencies

At Monroe, we have identified nine specific competencies we expect all employees of our organization to possess. These competencies are incorporated as a part of our Selection, Performance Management/Review and Developmental processes. The competencies and activities for this role are detailed below:

Technical Knowledge - demonstrates the specific skills necessary for the assignments, understands the background and points of leverage to be effective in the role.
* Safeguards information system assets by identifying and solving potential and actual security problems.
* Protects system by defining access privileges, control structures, and resources.
* Recognizes problems by identifying abnormalities; reporting violations.
* Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
* Determines security violations and inefficiencies by conducting periodic audits.
* Upgrades system by implementing and maintaining security controls.
* Keeps users informed by preparing performance reports; communicating system status.
* Maintains quality service by following organization standards.
* Maintains technical knowledge by attending educational workshops; reviewing publications.
* Contributes to team effort by accomplishing related results as needed.

Knowledge of Work Areas and Responsibilities - demonstrates a clear understanding of role and responsibilities within specific area, flexible and agile in adapting to changes or exploring opportunities and challenges.

* Remains current on evolving business processes and associated technology changes with the Monroe organization and with hardware and software configurations knowledge.
* Responds to other activities and initiatives deemed necessary by management.
* On-call availability for 24/7/365 support.

Communications - Verbal and Written - includes written and verbal communications, delivers presentations and has good listening skills.

Problem Solving and Conflict Leadership - strives to understand contributing factors, works to resolve complex situations, and helps individuals to resolve conflicts.

Delivering Results - Sense of Urgency - defines appropriate goals, works toward achieving goals, articulates vision and steps for achievement, meets deadlines and provides timely status updates and follow-through.

Teamwork/Cooperation - accountable to team, works to meet established deliverables, appreciates view of team members and is respectful of others.

Initiative - takes action, seeks new opportunities, and strives to see projects to completion.

Work Reliability/Quality - strives to eliminate errors, accurate work is a priority, and seeks opportunities to improve product/services.

Integrity and Trust - honest, accountable, upholds ethics standards and maintains confidentiality.

Experience and Skills

Education, Experience, and Skill Requirements

* Bachelor’s degree in Computer Science, Information Systems, or equivalent education or work experience
* Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification
* 5+ years of proven experience as a Cybersecurity Administrator with demonstrated repeatable experience and success with the following technologies: Proofpoint, Crowdstrike, Qualys, Expel, Firepower.
* Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations
* Deep knowledge of Active Directory, Office 365, ADFS, Exchange, MDT, SAN Storage, Cisco Networking and server hardware and operating system environments ( Server 2016 - Server 2019).
* Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
* Working knowledge of VMWare VSphere 6.x and greater as well as Citrix XenApp 6.x and greater.
* Experience with vulnerability scanning solutions ( Qualys preferred )
* Working technical knowledge of current network hardware, protocols, and Internet standards.
* In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. Exabeam, QRadar, Splunk)
* Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security
* Extensive cyber security related application support experience.
* Understanding of mobile technology and OS (i.e. Android, iOS, Windows), VMware technology, and Unix and basic Unix commands
* Strong interpersonal, written, and oral communication skills.
* Ability to present ideas to peers and management.
* Highly self-motivated and directed, with keen attention to detail.