System Administrator (Security Focus)

JMARK is an IT managed services provider headquartered in Springfield, Missouri, with a second office in Tulsa, Oklahoma, and numerous full-time remote employees spread throughout the country. The reason JMARK is a "best" place to work can be summed up in one word: culture. Nurturing a respectful, supportive, dynamic, spirited culture among the more than 125 individuals that make up JMARK is a point of passion for CEO Thomas Douglas. It matters so much to him that every decision made regarding JMARK is run through the filter of how it will impact the culture at large—as well as every employee on an individual level. This dedication to creating a positive environment has been instilled in every leader at any level—including the board of directors—and passed down to every employee in the company. From the first moment one walks in the door at JMARK, it is clear that this is a true family made up of teammates who care for one another, cheer each other on, and thrive on coming together to achieve greater things together than could ever be done alone. In fact, this feeling of fellowship is so strong that it transcends the distances between teammates working from home or in different locations.  The words "People First" are in our slogan, and everything that happens at JMARK leads back to that phrase.
Position Summary:
This role focuses on protecting our clients' valuable digital assets and maintaining the strength of their technology infrastructure. It involves providing both on-site and remote support for critical business systems, managing security tickets efficiently, and taking the lead in incident responses. A proactive approach to security and stability is key. By identifying and mitigating potential threats before they escalate, this role plays a vital part in upholding a secure environment. Additionally, it ensures seamless continuity in our response capabilities by backing up other Cyber Incident Responders. Beyond primary duties, this role also contributes to system administration tasks, working collaboratively with the team to maintain robust IT environments. This includes assisting with routine maintenance activities, installations, and deliveries, all in line with our commitment to providing comprehensive IT support to clients. Furthermore, it offers professional support to end users, troubleshooting and resolving complex technical issues related to personal computers, networks, hardware, software, or peripherals. Whether it is diagnosing and resolving operating errors, evaluating and fixing network connectivity or communication systems problems, or ensuring systems and workstations comply with organizational policies and security standards, this role ultimately strengthens our IT support services, contributing to the overall effectiveness of operations.
Duties and Responsibilities: 

1. Incident Response Management:
   • Provide rapid response and technical expertise for security incidents, both on-site and remotely. This includes efficiently analyzing and containing threats to minimize damage and disruption.
   • Utilize JMARK’s Client Incident Response Playbooks to guide your incident response activities. This includes leading the team through the framework's five functions: Identify, Protect, Detect, Respond, and Recover.
   • Serve as the primary point of contact for clients throughout the incident response lifecycle. Clearly communicate complex technical information to both technical and non-technical audiences, ensuring everyone is informed and aligned.
2. Security Tool Administration:
   • Proactively administer, maintain, and update endpoint, network, and cloud security tools like SIEM/SOARs, EDR, and both on-premises and cloud-based security systems.
   • Respond to security tool-generated alerts and conduct analysis of logs.
   • Enhance existing security tools and systems, pursuing the implementation of security industry and vendor best-practices
3. On-Call Rotation:
   • Participate in an on-call rotation.
4. System Administration Support:
   • Assist in System Administrator tasks, including routine maintenance, installations, and deliveries.
   • Contribute to the maintenance of robust IT environments, ensuring optimal performance and reliability.
5. Client Support:
   • Provide professional support for end users of personal computers, networks, hardware, software, or peripherals.
   • Diagnose and resolve errors, ensuring systems compliance with organizational policies and security standards.
6. Documentation and Reporting:
   • Maintain accurate records of incidents, actions taken, and resolutions achieved.
   • Generate reports on security incidents, vulnerabilities, and system performance for review and analysis.
   • Keep internal documentation updated and contribute to the creation of new documentation.
   <