Security Tool Administration Lead

Key Responsibilities

Security Tools Administration & Management

• Lead administration and support of enterprise security solutions.
• Ensure high availability, performance, and operational health of cybersecurity platforms.
• Manage tool configurations, upgrades, patches, licensing, and capacity planning.
• Develop and maintain standard operating procedures (SOPs) and technical documentation.
• Ensure adherence to security and change management processes.

Security Platform Ownership

Manage and govern security technologies including:

• SIEM (Microsoft Sentinel, Splunk, QRadar, ArcSight)
• SOAR Platforms
• PAM Solutions (CyberArk, BeyondTrust, Delinea, PAM360)
• IAM Solutions (Azure AD, Entra ID, SailPoint, Saviynt)
• EDR/XDR Platforms (CrowdStrike, Microsoft Defender, Trend Micro)
• Vulnerability Management Tools (Tenable, Qualys, Rapid7)
• Firewall & Security Management Platforms
• Web Application Firewalls (WAF)
• DLP Solutions
• CASB Solutions
• Cloud Security Platforms
• Threat Intelligence Solutions
• Security Monitoring and Analytics Platforms

Tool Engineering & Automation

• Drive automation initiatives to improve operational efficiency.
• Integrate security tools with enterprise applications and ITSM platforms.
• Develop scripts and workflows for monitoring, alerting, and reporting.
• Implement tool enhancements and optimization strategies.
• Support API integrations and automation frameworks.

Security Operations Support

• Provide L3/L4 technical support for critical security platforms.
• Support SOC, Incident Response, Vulnerability Management, and Compliance teams.
• Troubleshoot complex platform issues and coordinate vendor escalations.
• Ensure security platforms meet operational and regulatory requirements.

Capacity & Performance Management

• Monitor platform utilization and forecast future growth.
• Plan infrastructure sizing and scalability requirements.
• Conduct platform health reviews and optimization exercises.
• Maintain platform resiliency and disaster recovery readiness.

Governance & Compliance

• Ensure tools comply with organizational security standards.
• Support audit, compliance, and regulatory assessments.
• Maintain evidence required for audits and compliance reviews.
• Review privileged access and platform administration controls.

Vendor & License Management

• Manage vendor relationships and support contracts.
• Track software licensing and renewal cycles.
• Evaluate new security technologies and product enhancements.
• Coordinate proof-of-concept (POC) and product assessments.

Team Leadership

• Lead and mentor security tool administrators and engineers.
• Assign tasks and monitor operational deliverables.
• Conduct performance reviews and skill development planning.
• Drive technical training and certification programs.

Required Skills & Experience

Technical Skills

• Security Platform Administration
• SIEM/SOAR Engineering
• CyberArk PAM Administration
• EDR/XDR Administration
• Vulnerability Management Platforms
• IAM & Identity Governance
• Network Security Technologies
• Cloud Security Platforms
• Windows & Linux Administration
• PowerShell, Python, Bash Scripting
• REST APIs and Integrations
• ITSM Tools (ServiceNow, Remedy)
• Database and Log Management

Experience

• 8-12+ years of IT and Cybersecurity experience.
• 4-6+ years of experience administering enterprise security platforms.
• Experience supporting large-scale environments with thousands of endpoints, servers, and users.
• Experience managing security tools in hybrid and cloud environments.
• Strong troubleshooting and problem-solving capabilities.