Electrosoft is seeking an experienced Cybersecurity Professional to administer, engineer, integrate, automate, and support enterprise security tools and infrastructure platforms on an onsite basis in Atlanta, GA. In this role, you will help strengthen endpoint protection, asset intelligence and CAASM capabilities, and security analytics using Elastic SIEM, while driving automation, troubleshooting, and technical leadership across security tooling.
What you’ll do
- Administer, engineer, maintain, and troubleshoot enterprise security tools and infrastructure platforms, including CrowdStrike, Armis, Axonius, and the Elastic Stack / Elastic SIEM.
- Support endpoint security, asset discovery and CAASM, security analytics, dashboards, monitoring, reporting, policies, integrations, and ongoing platform health.
- Build and maintain integrations using REST APIs and scripting with Python, BASH/Shell, Perl, JavaScript, and related technologies.
- Automate security and infrastructure administration, monitoring, reporting, and operational processes to improve reliability and efficiency.
- Perform command-line administration and configuration for security infrastructure, servers, applications, APIs, and network connectivity, including troubleshooting.
- Partner with Security, Infrastructure, Network, Server, and Operations teams to resolve issues and improve platform performance.
- Lead or support security tool implementations, upgrades, migrations, integrations, and enhancement initiatives.
- Gather technical and business requirements and translate them into technical specifications, workflows, implementation plans, and solutions.
- Track project requirements, dependencies, risks, issues, schedules, and action items through to completion.
- Continuously evaluate existing processes and systems to identify opportunities for automation, optimization, and integration.
- Maintain technical documentation, system designs, configurations, procedures, runbooks, and service records.
- Apply security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
- Provide technical leadership and mentoring to junior team members.
What you bring
- Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, Information Security, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.
- Approximately 8+ years of experience across cybersecurity, information security, security engineering, infrastructure engineering, or related IT disciplines.
- Current professional security certification such as CISSP, CISM, ISSEP, or equivalent/higher-level certification.
- Hands-on experience with enterprise security technologies, including CrowdStrike and preferably Armis and/or Axonius.
- Experience with Elastic Stack / Elastic SIEM or comparable SIEM and security analytics platforms.
- Strong scripting and automation skills using Python, BASH/Shell, Perl, JavaScript, or similar languages.
- Experience with REST APIs, system integrations, and security automation.
- Strong command-line administration and troubleshooting skills, with knowledge of network fundamentals and LAN/WAN troubleshooting.
- Strong analytical, problem-solving, communication, documentation, and collaboration skills.
- Ability to work independently, support cross-functional teams, and participate in a 24/7/365 on-call rotation.
Compensation and location
Location: Atlanta, GA (onsite)
Salary: USD 130,000 - 150,000 per year
Technologies
CrowdStrike, Armis, Axonius, Elastic Stack, Elastic SIEM, REST APIs, Python, BASH/Shell, Perl, JavaScript, SIEM, CAASM, CIS Controls, NIST SP 800-53 Rev. 5, DISA STIGs
