Note: The job is a remote job and is open to candidates in USA. My3Tech is seeking a Security Architect Consultant and Data Modeling Engineer to support enterprise security platforms and information security operations. The role focuses on Cribl data modeling, log pipeline ingestion, SIEM, security sensors, endpoint monitoring, threat mitigation, security control validation, incident response, and technical documentation.
Responsibilities
- PRIMARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING: CRIBL DATA MODELING AND LOG PIPELINE INGESTION SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM) ASSIST WITH DESIGN AND CONFIGURATION OF LINUX BASED SECURITY SENSORS AND ENDPOINT MONITORING TOOLS
- SECONDARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING: EXTENDED DETECTION AND RESPONSE (XDR) VULNERABILITY MANAGEMENT PLATFORMS AND PROCESSES DATA LOSS PREVENTION (DLP) SOLUTIONS SECURITY AWARENESS AND TRAINING PLATFORMS
- COLLABORATE WITH SECURITY ARCHITECTS TO DESIGN AND IMPLEMENT ENTERPRISE SECURITY SOLUTIONS THAT ALIGN WITH LEADERSHIP’S BUSINESS GOALS, REGULATORY REQUIREMENTS AND ORGANIZATIONAL RISK TOLERANCE
- DESIGN, DEPLOY AND MANAGE COUNTERMEASURES TO ADDRESS KNOWN SECURITY THREATS AND CONTRIBUTE TO MITIGATION STRATEGIES FOR EMERGING THREATS TO ENTERPRISE DATA, SYSTEMS AND SERVICES
- ENSURE CONSISTENT APPLICATION OF SECURITY CONTROLS ACROSS ENTERPRISE INFRASTRUCTURE AND APPLICATIONS; VALIDATE CONTROL EFFECTIVENESS AND RECOMMEND IMPROVEMENTS
- SUPPORT INCIDENT DETECTION AND RESPONSE ACTIVITIES THROUGH MONITORING, LOG ANALYSIS AND REPORTING
- DEVELOP TECHNICAL DOCUMENTATION, IMPLEMENTATION GUIDES AND STANDARD OPERATING PROCEDURES AS NEEDED
- PERFORM OTHER DUTIES AS ASSIGNED IN SUPPORT OF THE DEPARTMENT OF ADMINISTRATION’S DIVISION OF INFORMATION SECURITY
Skills
- CRIBL DATA MODELING AND LOG PIPELINE DESIGN AND IMPLEMENTATION
- Strong understanding of enterprise security architecture and engineering principles
- Experience implementing and supporting enterprise security tools (SIEM, XDR, Vulnerability Management, DLP, endpoint security)
- Experience developing automation and integrations using scripting languages such as Python and Bash
- Knowledge of cybersecurity best practices, threat detection, and defensive security strategies
- Experience with Linux and Windows operating systems, including system hardening and security configuration
- Understanding of networking concepts, security protocols, and secure system design
- BACHELOR'S DEGREE IN AN INFORMATION TECHNOLOGY OR INFORMATION SECURITY RELATED FIELD
- EIGHT YEARS OF RELEVANT WORK EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION
- HANDS-ON CRIBL DATA MODELING EXPERIENCE
- Hands-on SIEM administration, analysis, and reporting experience
- Experience building and deploying Linux-based security sensors
- Familiarity with security frameworks and compliance standards such as NIST CSF, CJIS, IRS 1075, and CMS MARS-E
- FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS
- CISSP
- Security+
Benefits
- Remote work with occasional onsite work required
Company Overview
Company H1B Sponsorship