Job Opportunities API

As an Information Security Analyst III, you are the senior member of the Information Security Team and the primary owner of DATMARK's most significant security work. Your main focus is leading the response to all High and Critical severity tickets and incidents, drawing from “hands-on” incident response experience to contain, eradicate, and recover from threats. You are responsible for implementing new Information Security controls and for the ongoing maintenance and upkeep of existing ones. You oversee the work of the Information Security Analyst I and II, mentoring and developing the team, with particular focus on growing the Analyst I while recommending risk mitigation solutions based on audit findings and threat intelligence to continuously strengthen DATAMARK's security posture. Primary Responsibilities: 1. Systems Management and Technical Support (80%) o    Serves as the primary responder and owner for all High and Critical severity tickets and incidents. o    Leads Incident Response end to end; applying hands-on Incident Response experience to contain, eradicate, and recover from incidents, and conducts post-incident reviews and lessons learned. o    Responsible for the implementation of new Information Security controls, from evaluation and design through deployment and validation. o    Responsible for the ongoing maintenance, upkeep, and tuning of existing information security controls. o    Collaborate with the Director of Information Security on Security Architecture, standards, and the Security Roadmap. o    Oversees all Information Security Analyst I and II tasks, and assists, mentors, and develops the team with particular focus on growing the Analyst I. o    Continuously analyzes all organizational systems and reviews daily threat intelligence to identify and prioritize risk. o    Reviews and prioritizes vulnerability findings and drives remediation with the Information Security Analyst I/II and the IT Team through to closure. o    Recommends risk mitigation solutions based on audit findings and threat intelligence. o    Evaluates, pilots, and recommends new security tooling and technologies. o    Maintains and reports on security and compliance metrics monthly. o    Develops and maintains incident response playbooks, runbooks, and standard operating procedures. o    Assists in reviewing and assessing technical deployments for risk before company-wide implementation and ensures compliance with security standards. o    Administers, supports, and maintains enterprise IT security systems, including troubleshooting and remediation of complex system issues. o    Works with the IT Team to provide timely, effective support and maintains system documentation, including network and data flow diagrams.   As the Senior owner (covering architecture, system maintenance and escalation) the Information Security Analyst III is responsible for the following security platforms and audits, with day-to-day operation performed by the Information Security Analyst I and II: o    SIEM/MDR (Security Information and Event Management) (Managed Detection Response) ·          Regularly verify that all configured log sources (firewalls, servers, intrusion detection systems, etc.) send logs to the SIEM without errors. ·          Fine-tune existing correlation rules to reduce false positives and improve the accuracy of threat detection. This involves analyzing alerts, adjusting thresholds, and refining rule logic. ·          Investigate suspicious events and security incidents identified by the SIEM, using the available log data and other information to determine the root cause and scope of the issue. ·          Follow established incident response procedures to contain, eradicate, and recover from security incidents. o    PAM (Privileged A