Security Operations Administrator

Deque is looking for a hands-on Information Security Operations Analyst to join its IT infrastructure and product development teams.  Our ideal candidate has been part of an INFOSEC team and has hands-on experience with the tools, procedures, and practices of a SaaS company serving large, security-conscious corporations.  They will be committed to a career in InfoSec and working toward a CISSP certification.

In this position, you will be the primary point of contact with customers’ InfoSec questions and will work with Sales and Operations to ensure that customers feel confident in having Deque handle their confidential information.  You will also be the driver of the testing, monitoring, and auditing tasks required by our security, privacy, and business-continuity policies and procedures. Based on your knowledge of industry best practices, trends in the InfoSec profession, and the results of actual testing, you will recommend improvements and work with Product Development and Operations to implement approved changes.  You will be responsible for maintaining the relevant documents and communicating changes to policies and practices to the rest of the company and its affiliates.

• Regular monitoring of IT network and hosted products for security
• Work with IT and SaaS system administrators to ensure networks and servers are secure
• Conduct periodic penetration testing.  Document, communicate, and follow-through on the results
• Perform audits and test incident-response and business-continuity plans. Document, communicate, and follow-through on the results
• Answer customer questions about information systems security and business continuity
• Maintain all security, privacy, and business-continuity policy and procedures documents

• 5 years of IT operations experience
• 2 years of InfoSec / SecOps team experience
• Knowledge of InfoSec and IT risk-assessment practices at a top bank in the US or a US Federal Government Agency
• Knowledge of InfoSec standards and frameworks such as ISO-27001, NIST, etc.
• Experience in the use of security monitoring and penetration testing tools such as Nessus, Nmap, Metasploit and particularly in relation to cloud security and SaaS applications.