All Jobs

Job SummaryEnsures the protection of the organization’s computer systems, networks and data from cyber threats. Key functions include developing security standards, documenting security events, coordinating incident response activities, responding to cybersecurity information requests, performing vulnerability and penetration tests to identify weaknesses and coordinating remediation efforts, and ensuring compliance with designated security policies and procedures. Supervisory ResponsibilitiesNo supervisory responsibilities.Budgetary ResponsibilitiesAssists with cybersecurity budget planning.Principal Duties and ResponsibilitiesMonitors Security Information and Event Management (SIEM) systems, Intrusion Detection Systems (IDS), and other security tools for security alerts and anomalies.  Conducts initial triage, investigation, and analysis of security incidents (e.g., malware infections, unauthorized access attempts, DDoS attacks).  Executes incident response procedures, including containment, eradication, and recovery, and document all steps taken.  Performs regular vulnerability scans and penetration testing (or coordinate with external vendors).  Analyzes scan results, prioritize risks, and collaborate with IT teams to manage and track remediation efforts.  Stays current on the latest security threats, vulnerabilities, and industry trends.  Develops and maintains threat models and risk assessments for critical assets.  Assists in the development, implementation, and maintenance of security policies, standards, and procedures.  Review and recommend security enhancements to existing systems and new projects.  Participate in recommendation and implementation of various security infrastructure platforms (e.g., firewalls, endpoint detection and response (EDR), multi-factor authentication (MFA)).  Assist with internal and external security audits and compliance efforts (e.g., ISO 27001, HIPAA, SOC 2).  Maintain accurate security logs and documentation for regulatory compliance.  Support the creation and delivery of security awareness training for all employees.  Participates in a 24/7 on-call rotation as required.  QualificationsEducation (Minimum)Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, OR equivalent practical experience in an information security or IT role, with a focus on security operations.Experience (custom)Relevant industry certifications such as CompTIA Security+, CISSP, CEH, GIAC (GSEC, GCIA, GCIH), or CCSP. Experience with security tools such as SIEM (e.g., Splunk, LogRhythm, Azure Sentinel), IDS/IPS, firewalls (e.g., Palo Alto, Cisco), and EDR platforms. Experience with cloud security platforms (AWS, Azure, or GCP). Experience with scripting languages (e.g., Python, PowerShell) for automation.LicenseValid driver’s license and valid Passport.Travel10% travel to other Tropical locations.PhysicalOffice Environment – Manual dexterity to perform repetitive motion tasks on computer. Ability to bend or stoop to retrieve lower shelf files. Ability to reach overhead to retrieve upper shelf files. Ability to sit 1/3 – 2/3 of day. Ability to travel in various modes of transportation (e.g. automobile, airplane, train etc.) Occasionally exposed to outside elements. Ability to lift 50 pounds on a regular basis.Skills, Knowledge and AbilitiesKnowledge of network protocols (TCP/IP), network security architecture, and operating systems (Windows, Linux, macOS).  Proficiency in the application of NIST Cyber Security Framework, CIS Controls, SOC 2, ISO 27001, and other best-practice standards.  Knowledge of common security frameworks (e.g., NIST CSF, MITRE ATT&CK).  Knowledge of forensic analysis techniques.  Skills in analytical thinking and problem solving.  Skills in oral and written communication.  Skills in project management and organization  Ability to pay attention to detail.  Ability to communicate technical information to a non-technical audience.  View Job Descriptions Status