Senior Security Support Engineer

WILL WORK ONSITE 4X PER WEEK IN MIDTOWN!

About Us

Thrive is a rapidly growing technology solutions provider focusing upon Cloud, Cyber Security, Networking, Disaster Recovery and Managed Services.  Our corporate culture, engineering talent, customer-centric approach, and focus upon “next generation” services help us stand out amongst our peers.  Thrive is on the look-out for individuals who don’t view their weekdays spent at “a job”, but rather look to develop valuable skills that ignite their passion and lead to a CAREER.  If you’re attracted to a “work hard, play hard” environment, seeking the guidance, training and experience necessary to build a lucrative career, then welcome to THRIVE!! 

Position Overview

We are seeking a Senior Security Support Engineer focused on supporting and managing the security needs of our financial services clients. Responsibilities include ensuring tailored security solutions, overseeing customers' security platforms, and collaborating with clients to customize reports. The engineer will manage security tools such as ESET, Palo Alto Networks, Cisco Meraki, Netwrix, Mimecast, InfoSecIQ, Synack, Splunk, FortiSIEM, Sumo Logic, eSentire, SpecOps, Duo Security, Orca Security, and Zerofox. Additionally, the role involves documenting security processes, staying updated on security events and techniques, and co-managing security platforms. This position requires a proactive approach to security, strong client communication skills, and adaptability to evolving threats and technologies. 

Primary Responsibilities

• Take ownership of the security posture for a portfolio of financial services clients, ensuring the implementation and enforcement of security policies and standards 

• Spearhead the ongoing management and enhancement of our customers' security platforms to achieve optimal performance and security posture

• Expertise in managing Crowdstrike endpoint protection and malware detection

• Experience with Palo Alto Networks' firewall and security solutions

• Knowledge of Cisco Meraki for cloud-managed IT solutions

• Design, implement, and manage IAM solutions, enforcing least privilege principles and strong authentication/authorization mechanisms. Stay current on IAM best practices and emerging trends

• Deeply understand and apply AWS security best practices (IAM, Security Groups, VPCs, KMS, CloudTrail, GuardDuty, etc.) to proactively secure AWS environments and ensure compliance

• Develop and maintain security automation scripts (vulnerability scanning, log analysis, incident response) and integrate security into the SDLC using DevOps principles. Leverage scripting languages like Python or Bash

• Implement and maintain security baselines for operating systems, applications, and network devices. Regularly review and update system configurations to mitigate vulnerabilities. Conduct security audits and assessments

• Implement and manage PAM solutions to secure, control, and monitor privileged access. Enforce strong authentication and authorization for privileged users. Conduct regular audits of privileged access

• Design, implement, and manage SIEM solutions to collect, analyze, and correlate security logs. Develop and maintain log parsing rules, alerts, and dashboards. Conduct in-depth analysis of security logs to investigate incidents and identify root causes

• Familiarity with Netwrix for IT auditing and data security

• Experience with Mimecast for email security and archiving solutions

• Knowledge of InfoSecIQ for security awareness training and phishing simulation

• Familiarity with Synack for crowdsourced security testing and vulnerability assessments

• Proficiency in using Splunk, FortiSIEM, Sumo Logic, and Esentire  for data analysis and security monitoring

• Experience with SpecOps for password management and multi-factor authentication

• Proficiency in using Duo Security for multi-factor authentication

• Familiarity with Orca Security for cloud security and compliance

• Experience with Zerofox for social media and digital risk protection

• Collaborate with clients to understand their reporting needs and requirements and customize reports accordingly

• Create and maintain materials documenting security processes, procedures, and technologies, along with generating automated reports for relevant stakeholders as needed

• Stay abreast of security events and techniques to keep our clients aware of new threat