Ankura is a team of excellence founded on innovation and growth.Practice Overview: Ankura Technology Services (ATS) provides all technical infrastructure and support services across the company in a secure, reliable, and cost effective manner. Examples include laptops, email, the service desk, network connectivity, fileservers, phones, servers and common applications. ATS’s goal is to enable Ankura's consultants and business groups to effectively deliver both internal and external technical engagements. ATS strives to innovate while operating the business efficiently with the appropriate cost, risk and service level trade-offs. Role Overview: The Manager, Infrastructure Security & Risk Management supports our Cybersecurity Governance as part of the IT Team within Ankura Business Services, our internal firm services function. The role is responsible for developing Ankura’s Cloud Security program and assisting in the identification, assessment, measurement, monitoring, and reporting of risk through Ankura’s program. Responsibilities:
Developing and expanding Ankura’s Cloud Security program
Helping build and maintain a Cloud and On-prem Security program according to the leading cloud provider guidelines
Evaluate and respond to alerts and events from the security tools, including tuning tool configuration to minimize false positives, developing event response documentation and processes for Security Operations Center response to follow for event actions, and escalating to appropriate teams for event response
Promote Cloud Security Best Practices: Advocate for secure cloud architecture and design patterns across multi-cloud environments (AWS, Azure, GCP)
Collaborate with Teams: Work with engineers, developers, and external teams to identify and remediate cloud security issues
Security Assessments: Conduct cloud security assessments on cloud infrastructure and applications
Cloud Security Posture Management (CSPM): Evaluate and implement tools for continuously monitoring cloud environments, ensuring compliance with security standards and policies
Incident Response: Lead or assist in cloud-based security incident investigations, focusing on root cause analysis and remediation efforts
Collaboration: Act as the technical liaison between Information Security and infrastructure teams to foster strong security practices and ensure the secure deployment of cloud applications
DLP management in an enterprise environment.
Work with malware and attack vectors and the ability to perform pattern analysis and discover root causes
Plan and scope security vulnerability assessments and penetration tests, familiar with assessment tools like Tenable and Qualys
Take ownership of analyzing and responding to security alerts from multiple sources within Ankura and determining possible causes of such incidents
To respond to incidents, perform real-time information security incident handling (e.g., forensic collections, intrusion correlation/tracking, threat analysis, and direct system remediation)
Responsible for monitoring emerging threat patterns, vulnerabilities, and anomalies and escalating any unknown threats to the Senior Management
Report appropriate operational issues to the Security Architecture team so that they may be resolved at an architecture level
Understand the latest cyber threat landscape and the company’s IT infrastructure.
Keeping up to date with attacker techniques and staying current on Information Technology (IT) security trends and news
Qualifications :
Bachelor’s Degree in a in Computer Science, Information Systems, Engineering or a related scientific or technical discipline
15+ years of experience working with a public cloud and on-prem infrastructure
Experience across multi-cloud environments (AWS, Azure, GCP)
Experience at admin level for O365 portals and Defender.
Experience with Microsoft operating systems and their security hardening.
Experience within EDR/MDR/XDR and Sysmon, as well as anti-virus, SIEM, general security analytics, and log sources.
Familiarity with Mac and Linux operating systems.
Familiarity with encryption, access management, transmission control and internet protocols (TCPs and IPs), and the CIA Triad (confidentiality, integrity, accessibility).
Strong understanding of malware, intrusion detection, and prevention systems.
Knowledge of networking protocols, switches, routers etc.
Knowledge of Firewalls cloud.
Knowledge of VMware.
Industry-specific technical knowledge, such as the use of specific analysis tools.
An understanding of information security frameworks and standards such as Cyber Essentials, NIST, and ISO 27001.
#LI-NT1#LI-RemoteAnkura is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability. Equal Employment Opportunity Posters, if you have a disability and believe you need a reasonable accommodation to search for a job opening, submit an online application, or participate in an interview/assessment, please email accommodations@ankura.com or call toll-free +1.312-583-2122. This email and phone number are created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues unrelated to a disability, will not receive a response.Ankura Consulting Group, LLC is an independent global expert services and advisory firm that delivers services and end-to-end solutions to help clients at critical inflection points related to conflict, crisis, performance, risk, strategy, and transformation. The Ankura team consists of more than 1,800 professionals serving 3,000+ clients across 55 countries who are leaders in their respective fields and areas of expertise. Collaborative Lateral Thinking That Deliversᵀᴹ, hard-earned experience, expertise, and multidisciplinary capabilities drive results and Ankura is unrivalled in its ability to assist clients to Protect, Create, and Recover Valueᵀᴹ. For more information, please visit, ankura.com.
Full-time