Security Tools Consultant

Reporting to
:
Information Security Director

Department name
: Security Platforms

Location:
Romania (Bucharest or Cluj-Napoca)

Job Description
We are looking for fast thinking, eager to learn players to join the Security Platforms Team. When you join the Security Platforms Team, you'll be working with a group of people who are passionate about our security, innovation, and the success of our business partners.

This is an opportunity to work on a team that is changing the way information supports business decisions. You will gain hands-on experience on how to help deploy security and centralized logging tools on an enterprise level scale. You'll also work by side with MassMutual business partners to help them solve their unique problems across a variety of use cases. This position will be focused on building and maintaining platforms and security use cases in conjunction with the Security Operations Center and Security Intelligence.

If this vision excites you, we are seeking a
Security Tools Consultant
to become a MassMutual Romania team member. This is a great opportunity to be a part of the transformational journey at MassMutual Romania. As we continue to grow our business and look for new ways to engage with customers, technology will be paramount, and you can be a part of this important work.

Job Responsibilities And Requirements

• Maintaining SIEM and data pipeline platform stability, diagnosing and resolving issues related to the platforms, creating, responding to, and resolving alerts, onboarding and parsing data
• Operational support of SIEM, Data pipeline, SOAR, Threat and other platforms, working through ServiceNow and JIRA tickets for customer assistance
• Assist the triage of potential incidents &/or breaches to the MassMutual network and systems
• Looks for and finds ways to improve operations
• Assist with remediation activities stemming from security event analysis, vulnerability management and intrusion detection
• Support MassMutual's operational information security responsibilities, including the development maintenance of standards, procedures, and baselines necessary to meet security requirements
• Minimum 4-5 years of experience in information technology
• Bachelor Degree in Information Technology or associated discipline; or two (2) years of experience in a related field for each year of college in lieu of a degree
• Solid technical writing skills
• Excellent written and oral communication skills
• Excellent troubleshooting skills, ability to solve problems with little to no supervision
• On Call duties as assigned

Technical Knowledge And Skills

• Experience with centralized logging, SIEM, Data pipeline, SOAR, and TIP platforms
• Hands on experience with or in support of any of the following vendors: Kafka, Sumo Logic, Cribl, Netskope, Crowdstrike, Palo Alto, Fortigate, Google, Apple, Microsoft, Atlassian, and other applicable products preferred
• Preferred: Cribl Edge, XSOAR
• Experience with Linux system administration
• Experience with scripting languages, programming in JavaScript, Python, JSON, CSS, pearl, PHP, and bash
• Knowledge of Active Directory, LDAP, UNIX, Windows Servers, Java, .NET
• Knowledge of information security systems such as firewalls, intrusion detection, antivirus, data loss protection, and vulnerability scanning
• Experience with data manipulation and data science
• Experience with regular expressions
• Knowledge of Database Management (MySQL, Sybase, Oracle, DB2, MS-SQL), building queries and developing stored procedures
• Information security solutions development either from an engineering perspective
• Experience and familiarity with CI/CD pipeline
• Experience with secure data communications and applications
• Extensive knowledge of current and upcoming IT security technologies