Selective Insurance Company of America Looking for Sr. Cyber Defense Specialist at Covina, California Full Time

Acting as a leader and subject matter expert to other IT Security staff, this role will protect enterprise information systems and data from intentional or accidental destruction, disruption, or modification while minimizing the impact upon those who need legitimate access to the data. Works closely across ITS teams and business units to identify and specify gaps, requirements, and solutions to security measures that safeguard access to enterprise files, networks, and data. Provides expert level consulting and leadership in the identification, escalation, and mitigation of security risks, anomalies, or threats to the Manager, IT Cyber Defense. This role is responsible to provide a timely and rapid response to monitoring, analyzing, and investigating, cyber threat, vulnerabilities, events, and incidents within the organization according to established procedures. Serves as point of escalation for third-tier support and provides expertise across a range of cyber defensive technologies within their area of responsibility. Analyzes security risks or potential incidents within area of responsibility and escalates to Manager, IT Cyber Defense. Accountable for detailed case management documentation and incident handling; independently using an expert skillset in advanced analysis of security tool alerts, threat intelligence data, processing of mitigations, and determination and escalation of threat detections.

Responsibilities:

• Acts as a subject matter expert to the enterprise and a mentor to other IT security staff. Independently initiates work as needed to meet cyber defensive needs, and exercises significant levels of accountability and ownership of security issues. Performs assessments, and incident response/threat intelligence consultation on security topics to enterprise projects and technology acquisitions, in support of Manager, IT Cyber Defense.
• Responsible for taking a lead expert role in false positive detection, event correlation, identifying indicators of threat activity, and executing actionable recommendations. Possesses an expert level of expertise in making recommendations that enable expeditious remediation. Independently identifies, assesses, and recommends cyber defense software, processes, and services to Manager, IT Cyber Defense based on business plans and security gaps, as appropriate. Able to translate high level designs, recommendations ,and industry trends into effective solutions, and leads the execution of these solutions.
• During incident response events works with ITS Cyber Defense Manager to perform event triage, scoping, criticality and impact. Perform defensive actions such as incident handling, forensic analysis and chain of custody documentation in support of incident response. Possesses an expert level of knowledge in intrusion detection methodologies and techniques for detecting host and network-based intrusions and considered an expert in in protecting a network against malware. (E.g. NIPS, anti-malware, restrict/prevent external devices, spam filters)
• Recognizes and identifies potential areas where existing data security policies, procedures, and controls require change, or where new ones need to be developed, especially regarding future business expansion. Maintains an awareness of industry trends and emerging risks, and proposes relevant company response.
• Identifies, initiates, and manages contact with vendors regarding new cyber defensive technologies, security system updates, and technical support of security products.
• Acts as a third-level support to manage critical issues that may affect clients, including determining short-term solutions. Completes status and statistical reports in assigned area as required while recommending long term solutions.
• Leads the development and execution of a remediation strategy for routine and potential areas where existing cyber defensive policies and procedures may require change, or where new ones need to be developed Takes a leadership role in supporting the ITS Cyber Defense Manager in partnering with legal and audit departments to ensure compliance with policy and regulatory requirements.
• Leads analysts in maintaining and enhancing vulnerability management procedures. Plans, manages, and executes upgrades to existing systems and communicates and coordinates change with impacted departments, directly or through delegation.
• Under direction of management and counsel, plays a leading role in the incident response process, and contributes to recovery activities.
• Participates in the Cyber Defense Center on call rotation. Coaches Developers, Technicians, Architects, and Managers as a thought leader in the development and enforcement of Enterprise Architecture and Security standards.

Qualifications:

• Expert level knowledge of current security control technologies and procedures for a large scale environment.
• Knowledge of firewall theory and configuration, intrusion detection and internet architecture. Ability to understand and clearly explain general methods of information security to other members of the organization.
• Ability to express complex technical security control concepts passionately and effectively (verbally and written).
• Ability to work well with people from different disciplines with varying degrees of technical experience. Ability to communicate effectively when dealing with external customers and suppliers
• .Knowledge of national and international regulatory compliances and frameworks such as NIST-CSF, ISO-27000, SOX, BASEL II, EU DPD, HIPAA, and PCI D
• 5 -7 years’ experience in Information Technology or Risk Management roles, with at least 4 years in a security role.
• Bachelor’s or master’s degree in computer science, management information systems, business administration, or related discipline is preferred.
• Ability to express complex technical concepts effectively, both verbally and in writing Ability to work well with people from many different disciplines with varying degrees of technical experience Security specific certifications such as CISSP, GIAC, or equivalent designation highly preferred

Salary range: $101,400 – $167,600. The actual base salary is based on geographic location, and the range is representative of salaries for this role throughout Selective’s footprint. Additional considerations include the candidate’s qualifications and experience.

A new job is a big decision. Don’t work just anywhere. Be Selective.

Our Business

Selective is a midsized U.S. domestic property and casualty insurance company with a history of strong financial performance for over 95 years. Focused on exceptional employee and customer experience, we are frequently recognized for awards and honors, including being named to Forbes’ 2021 Best Workplaces in Financial Services and Insurance list.

Our Culture

We genuinely care about each other, our customers, and the communities in which we operate. Our leaders actively champion career development and invite us to voice unique ideas and diverse perspectives. If that sounds appealing, we think you would feel inspired on our team to achieve and be rewarded for extraordinary results.

Selective is an Equal Employment Opportunity employer. That means we respect and value every individual’s unique opinions, beliefs, abilities, and perspectives. We are committed to promoting a welcoming culture that celebrates diverse talent, individual identity, different points of view and experiences – and empowers employees to contribute new ideas that support our continued and growing success. Building a highly engaged team is one of our core strategic imperatives, which we believe is enhanced by diversity, equity, and inclusion. We expect and encourage all employees and all of our business partners to embrace, practice, and monitor the attitudes, values, and goals of acceptance; address biases; and foster diversity of viewpoints and opinions.

Selective maintains a drug-free workplace.