Systems Security Specialist

We are seeking an experienced Systems Security Specialist – SA5 to provide hands-on enterprise security engineering, security operations, email security administration, incident response, and threat-hunting support for a large enterprise environment.

About Influxinfosys

Welcome to Influxinfosys. Apply for a career and reach your goals.

Description

Position Overview

We are seeking an experienced Systems Security Specialist – SA5 to provide hands-on enterprise security engineering, security operations, email security administration, incident response, and threat-hunting support for a large enterprise environment.

The consultant will serve as a primary hands-on administrator for assigned security technologies and will independently perform security platform configuration, administration, tuning, troubleshooting, investigation, documentation, threat hunting, and incident-response activities.

Key Responsibilities

Security Platform Administration

• Administer and support enterprise security platforms including Microsoft Defender, Palo Alto Cortex, Tanium, Proofpoint, Tessian, and Abnormal Security.
• Configure, tune, maintain, and troubleshoot security policies, rules, integrations, connectors, exclusions, allow/block lists, alerts, and automated security actions.
• Monitor platform health, licensing, utilization, sensors/agents, integrations, data flow, and configuration drift.
• Identify security control gaps, conflicting configurations, integration issues, and opportunities for security optimization.

Microsoft Exchange & Email Security

• Administer Microsoft Exchange Online and enterprise email security architecture.
• Manage mail flow, transport rules, connectors, message tracing, quarantine, anti-spam, anti-phishing, impersonation protection, and domain controls.
• Investigate phishing, business email compromise, malicious attachments/links, spoofing, account compromise, and anomalous email activity.
• Coordinate security configuration and response activities across Exchange Online, Microsoft Defender, Proofpoint, Tessian, and Abnormal Security.

Incident Response & Threat Response

• Monitor security queues and perform alert triage and incident response.
• Investigate security alerts and incidents, determine scope and impact, collect/analyze evidence, and recommend containment actions.
• Support endpoint isolation, indicator blocking, malicious email removal, account containment, policy changes, and evidence preservation.
• Perform root-cause analysis and document incident chronology, findings, actions, residual risk, and corrective recommendations.
• Respond to high-priority security incidents within established response-time requirements.

Required Qualifications

• 7+ years of progressively responsible IT and cybersecurity experience in enterprise environments, including security engineering, security operations, endpoint security, identity security, cloud security, and messaging security.
• 4+ years of recent hands-on production experience with Palo Alto Cortex and Tanium, including Cortex for Endpoint and Tanium Comply Modules.
• 3+ years of recent hands-on enterprise email security experience with Proofpoint, Tessian, and Abnormal Security. Experience with each named technology is required.
• 3+ years of Microsoft Exchange Administrator experience, including Exchange Online, mail flow, transport rules, connectors, message tracing, anti-spam, anti-phishing, quarantine, and mail routing.
• 3+ years of hands-on security incident response experience covering alert triage, investigation, containment, eradication, recovery, root-cause analysis, and post-incident documentation.
• 2+ years of hands-on threat-hunting experience across endpoint, identity, email, network, and cloud telemetry.

Preferred Technical Skills

Security: Microsoft Defender, Palo Alto Cortex, Tanium

Email Security: Proofpoint, Tessian, Abnormal Security

Microsoft: Exchange Online, Microsoft Entra ID/Azure AD, Conditional Access, MFA

Threat Hunting: Endpoint, Identity, Email, Network, Cloud telemetry

Scripting: PowerShell

Incident Response: Alert triage, containment, eradication, recovery, RCA

Detection: SIEM/security telemetry, detection logic, indicators, automated response