Job description
Success in this role requires the ability to collaborate at multiple levels of the cybersecurity team, the ability to weigh risk against the impact to business operations, and proven technical cybersecurity experience for a rapidly growing organization.
- Conduct cloud security analysis, evaluate configurations, and provide recommendations of O365, AWS, and other cloud platforms and environments based on the NIST Risk Framework.
- This may include Microsoft's cloud solutions such as Microsoft 365 Defender, Microsoft Cloud App Security (MCAS), Microsoft Information Protection (MIP), Conditional Access, Intune, Azure Defender, AWS EC2, AWS S3, and other SaaS/IaaS solutions.
- Perform security risk assessments and threat path analysis for these Cloud platforms/environments.
- Works with SOC staff to continuously develop and document incident response playbooks in accordance with the ever-changing threat landscape.
- Respond to Critical Incident Response Team activations as needed.
- Collaborate with other cybersecurity engineers and analysts in the IT and OT organizations to manage security threats and response capabilities.
- Support Proof of Concept (PoC) and Production deployments of cloud technologies for the organization.
- Assist in IT initiatives transitioning to cloud services such as setup and service configuration with a focus on cloud cyber risk mitigation.
- Configuration and delivery of cloud security and compliance reports.
- Providing Expert level support for M365 services and address security-related risks through research and troubleshooting and working with Microsoft.
- Executing on cloud security engagements during different phases of the lifecycle - Assessment, Design, Implementation, and Operation.
- Documenting platform technical issues, conducting analysis, and driving resolution as part of cyber risk mitigation steps
- Assist in the development of cloud-specific security policies, standards, and procedures e.g., Cloud governance, O365 management and configuration, auditing and monitoring, security incident and event management, data protection (DLP and encryption), user and administrator account management, conditional access controls and password/key management.
- Implementation and continued operation of industry leading practices around cloud security controls, monitoring, and response.
- Uses a threat-based, intelligence-led approach and collaboration inside and outside the security team to continuously assess existing capabilities and identify future requirements in support of the organization’s mission and goals.
- Committed to continuous education and being a recognized industry leader in cybersecurity
- Serves as a key advisor to the Director of Business Information Security, Director of Cybersecurity, and Manager of Cybersecurity Operations.
- Participates in cybersecurity team efforts as they relate to the cybersecurity program and incident response including off-hour response.
- Advise information/cyber security teams, including CISO/CIO/Director of Business Information Security/Director of Cybersecurity, on industry best practices and internal Smithfield developments in business practice, technology, cybersecurity issues and legislation that impact the company’s cybersecurity policy.
- Bachelor’s Degree from a regionally accredited four-year college or university and 5+ years of relevant experience, or equivalent combination of education and experience, required.
- Minimum of 5+ years of experience with Public, Private and Hybrid cloud administration and support, required.
- Expert level skills with Azure/AD, Office 365, Exchange, email threat protection and PowerShell.
- Experience with "defense-in-depth" and “defense-in-breadth” principles and technology.
- Understanding of frameworks such as PCI, SOX, SOC 2, HIPAA, GLBA, NIST CSF, NIST SP-800, MITRE, ISO 27001
- Experience with Vulnerability assessment and remediation.
- Advanced documentation, prioritization, and analytical skills.
- Strong understanding with VMWare, AWS, Azure integration and administration.
- Ability to handle proprietary and sensitive information in a confidential manner.
- Proven ability to execute multiple tasks efficiently and effectively.
- Proven ability to work effectively in a collaborative team environment.
- Proven ability to work effectively as a remote individual contributor.
- Proven ability to solve problems using tools and/or processes.
- Demonstrated flexibility, organization, and self-motivation.
- Experience working in a multinational company with complex integrated environments in Information Technology (IT). Experience in Operations Technology (OT) desired.
- Broad and deep knowledge of business, technology/IT and cybersecurity technologies and approaches.
- Ability to communicate effectively across all levels of the organization, including the delivery and explanation of complex security-related concepts into clear, concise, and understandable terms.
- Excellent written and verbal communication skills.
- Hands on role working directly with business and technology teams to integrate security into current and new capabilities
- Strong collaboration and experience working in matrixed environments.
- Proactive and responsive.
- Critical thinking skills with an inquisitive and questioning nature.
- Solid analytical skills, experience solving practical issues and engaging cross functional teams of multiple process partners to gain consensus.
- Ability to work well with others in fast paced, dynamic environment.
- Ability to be respectful, approachable and team oriented while building strong working relationships and a positive work.
- Knowledge of Authentication and Authorization mechanisms across different web technologies and protocols (SSL/TLS, REST, OAuth, SAML, etc.).
- Experience in creating new hosting solutions using AWS cloud services such as EC2, VPC, VPN, Security Groups, CloudFront, Cloud Watch, IAM, CloudFormation, CloudFront, and S3.
PEOPLE MATTER
More than 63,000 employees globally drive our success. We strive to create a fair, ethical and rewarding work environment.
GROWTH & DEVELOPMENT
Working at Smithfield isn't just a job – it's the foundation for a lifelong career with training designed to help you advance professionally.
BENEFITS
Our people matter. That's why we offer excellent, comprehensive benefits packages to our full-time employees. Also, education benefits available to full and part-time Smithfield team members on their first day of employment.
SUSTAINABILITY PLEDGE
Sustainability is ingrained in our culture and guides how we operate. We believe in innovating for the future.
caravetterealestate.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, caravetterealestate.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, caravetterealestate.com is the ideal place to find your next job.