Information Security Specialist

Please note that this job posting is for an evergreen position and does not represent an active or current vacancy within our organization. We continuously accept applications for this role to build a talent pool for future opportunities. While there may not be an immediate opening, we encourage qualified candidates to submit their resumes for consideration when a suitable position becomes available

The Harris Corporate IT Team is seeking an Information Security Specialist who will participate in evaluating, developing, and implementing security tools, standards, procedures, and guidelines for multiple platforms in diverse systems environments as needed. As the Information Security Specialist will utilize your wide area of expertise in network, cybersecurity, incident management, security frameworks and other areas to provide security support for the Harris group of companies.

You will analyze, montior, track, and report behaviors and tasks logged by assets (ie, applications, systems, networks) in the form of incidents to ensure Harris' network and systems are protected from any potential leaks of information or malicious activities. Routine tasks include analyzing and correlating event logs to help identify normal versus malicious activity in the network/domain and proactively monitoring cybersecurity and information technology infrastructure, including hardware, software, networks, applications and services.  

This position will communicate with the Corporate IT team, customer's IT representatives, Managed Security Services and other appropriate areas, as deemed necessary.
 

Job Description

• Responsible for the installation, maintenance, and monitoring of security systems and tools for the purpose of protecting systems and data from breach and malicious attack.

• Performs vulnerability scanning for network devices, applications and databases in order to determine if these assets have any vulnerabilities to potential internal or external threats.

• Analyzes and assesses security incidents and escalates incidents by following incident plan.

• Creates, develops, and maintains standard practices and procedures to respond appropriately to internal and external threats.

• Manage and analyze the security information and event management (SIEM) tools and services.

• Assesses potential risks and vulnerabilities in the network by establishing status quo for the networks and recognizing any deviations in order to provide actionable recommendations in the event of malicious activity.

• Performs risk and security assessments of applications, databases, and servers and supports networking technologies, such as routers, switches, access points, in order to determine if these assets have any vulnerabilities to potential internal or external threats.

• Works with Datacenter Services and Network Services teams to solve information security system problems and issues in a timely and accurate manner to prevent malware or a malicious actor from coming into the environment. 

• Monitors activities and events to ensure that anomalous behavior is detected, identified, classified and acted upon where appropriate and in a timely manner.

• Develops and executes corrective action plans and remediation plans when issues, risks or vulnerabilities are identified in order to mitigate the risk of exploitation.

• Assess emerging technologies against security architecture to determine where they fill gaps, overlap with existing solutions or extend capabilities.

• Participate in annual security audits, incident response exercises, security reporting, audit and compliance support.

• Work with Information Security Officer to provide security technology escalation support and remediate security issues.

• Perform reviews and assessments of security controls before hardware/software is migrated to production and performs application scanning to ensure that code releases are secure

Qualifications

• Minimum of 5 years experience as a System Administrator (Unix/Windows) and Network Administrator

• Minimum of 3 years experience in a security operations center and/or system administration role

• Experience troubleshooting common network devices, network vulnerabilities and network attack patterns

• Experience analyzing IIS, SQL, firewall, IPS/IDS, Windows, SEP, Web, and mail filtering logged events.

• Hands on experience managing an array of security tools (e.g. Web Content Filtering, Malware, Firewalls, Intrusion Protection, etc.)

• Ability to write security requirements and design documents

• Ability to read system data, including, but not limited to, security and network event logs, web, anti-virus, DLP, syslogs, IPS, and firewall logs.

• Knowledge of VMware and VM server platforms

• Knowledgeable about security issues, vulnerabilities, regulatory and legal changes, and security standards that may impact information security

• Bachelor's degree in Computer Science, Information Systems, Network Security Engineering or related major or equivalent work experience.

• CISSP, CCNA, MCSE certifications would be considered an asset

What we can offer

• Culture for Growth

• Employee Health & Well Being Benefits

• Focus On Sustainability

• Flexible work options

• Opportunity for advancement

About Us

Harris provides mission critical software solutions for the Public Sector, Healthcare, Utilities and Private Sector verticals throughout North America, Europe, Asia and Australia. Follow us on social media to learn more about our company values, culture and initiatives