IT Security Specialist

The IT Security Specialist is responsible for the protection of the organization through both the monitoring of the IT security environment within LB Foster, and the reactive response to threats in our landscape, as well as to build a security conscious culture and develop company-wide best practices for IT security.

This position is a skilled technical position in the IT Security department and reports to the Manager, IT Security.

1. Responsible for the monitoring, reporting, deployment, and maintenance of the security platforms in operation within the company.
2. Accountable for the reaction, investigation, and response to various threats in our environment when they happen (during and after normal business hours) in accordance with an incident response plan and other IT security processes.
3. In charge of the pro-active threat hunting, and cyber security assessment of both our environment and other potential environments. Assessments are expected to be performed with skilled tradecraft, sometimes in conjunction with third parties.
4. Conduct the validation of our security posture by analysis and monitoring of the various reports and information produced by our security tools. In addition, participation in table top exercises and 3rd party penetration testing, spot testing and audits is expected.
5. Manage small to medium size projects through all phases of the effort (from project initiation to closure and reflection). Project delivery and execution where it relates to security related initiatives.
6. Triage and resolve cyber security related service requests and tickets
7. Responsible for the health of the security agents and tools deployed throughout our environment.
8. Monitor our infrastructure across the enterprise - this includes Private Cloud, Azure, on-site deployments.
9. Network security monitoring including firewalls, internet filtering, network security and bandwidth, SD-WAN security, as well as Execution of security projects and initiatives.
10. Assist in userbase awareness and training programs.
11. Review and investigate submitted phish emails and phish campaigns as well as remediation
12. Participate in business level discussions about our digital product security as needed.
13. Assist in the implementation of the IT security Controls framework (e.g. NIST, ISO 27001).
14. All duties as assigned.

• 1+ years of experience in IT Systems Administration required, higher preferred.
• 1+ years of security related technology experience required, higher preferred.
• 1+ year of IT helpdesk related experience or working experience in a customer service centric role.
• Associates degree or other education in IT security or related field preferred or at least 2 years of related experience required.

• Ability to learn new skills in a rapidly changing space
• Understanding of networking concepts including TCP/IP and OSI model
• Ability to perform well-documented, well-written and competent investigations of cyber security threats and incidents in the environment
• Ability to execute various security tests using skills and tools from experience gained in the cyber security space
• An ability to research and to stay current on IT security trends and news.
• Ability to create strong documentation for user awareness and incidents
• Solid understanding of security standards, protocols, authentication, & authorization.
• Ability to participate in the assessment and secure integration of acquired businesses.
• Awareness of IT security auditing standards
• Thorough understanding of technology and IT systems, including desktop & server operating systems, Active Directory, group policy, firewalls, proxies, SIEM, Antivirus, and IDPS concepts.
• Key Skills: Security Monitoring, reporting, alerting, SIEM data reporting, alerting and investigation, forensics
• Must have reliable transportation

• Display strong interpersonal and communication skills and be able to work with a diverse group of employees and vendors.
• Strong sense of accountability and ownership
• Integrity - Ability to handle sensitive and confidential information
• Multitasking and adaptability – working in a fast-paced environment which may change rapidly when responding to time sensitive tasks
• Occasional [No more than 5%] travel
• Ability to respond quickly and effectively to all security incidents and provide post-event incident reports
• Willingness and ability to work outside normal working hours on occasion to respond to alerts and support technology and security related efforts.
• Ability to work well both independently and as part of an effective team
• Ability to see initiatives, projects, and tasks through completion.
• Must be able to learn and improve skillset through provided training and self-learning