.Why CompuCom? (Overview): You will assist in the management of enterprise security architecture as well as provide technical support and advice on a wide variety of information security responsibilities, issues and problems. This includes Security Incident Response, Vulnerability Management, Network and Application Vulnerability Scans, Leading/Performing Forensic Investigations, Compliance, Documentation, User Awareness and being a Subject Matter Expert in these and other areas related to Information Security. Lead and/or work with internal, external and client teams to assist with the improvement of security of information systems, processes and procedures as well as to ensure compliance with all established policies, standards and regulations relevant to CompuCom and our clients.What We Need & What You'll Do (Responsibilities):- Work with customers to gain a good understanding of an organizations IT Security, technology and Information Systems- Lead and/or participate in security incident response activities as directed and as outlined in Security Incident Response Policy and Procedure; - Monitor for, analyze, determine applicability, and take action for security events that are reported via a variety of sources, including a SIEM, IDS/IPS and AntiMalware servers; - Review and update the incident response documentation, process and procedures to ensure continuous improvement- Monitor, analyze, determine applicability, and assess risk for reported vulnerabilities to minimize risk; - Participate in the Security Vulnerability Management process, offering advice and recommendations in order to ensure risk from vulnerabilities is kept to a minimum.- Ensure that approved scanning tools have at least the minimum level of access needed to identify vulnerabilities that may exist for the device environment; - Ensure that approved scanning tools are configured to perform all necessary tests in order to have a complete and accurate risk profile for all production systems and devices; - Generate and publish reports of vulnerabilities; using these reports, assess level of compliance with the Security Vulnerability Management process; - Perform threat huntingactivities to proactively detect and isolate advanced threats that evade existing security solution- The Forensic Expert may need to aid and assist Legal team and other investigators in understanding the implications of their findings regarding the collected evidence- Working with team members and business unit representatives, develop and publish information security policies, processes and procedures that support compliance with industry standards and regulations.- Update existing information security policies, processes and procedures to ensure the policies remain current with industry standards and regulations; - Review security related documentation produced by other teams for accuracy and completeness; where appropriate, assist with identifying the security requirements
