QuikTrip hiring Cyber Security Operations Engineer II in Tulsa, OK | LinkedIn (2024)

Cyber Security Ops Engineer II

Corporate Office

TULSA, OK, US, 74134

Primary Purpose Of Job:

The CSOC Operations Engineer II position is responsible for the execution of incident response, threat detection and continuous improvement of solutions which defend and protect QuikTrip’s computer systems, information, and networks from intentional or unintentional access, modification or destruction. This position assists in the designs, plan, documentation and support of projects and cyber security solutions for QuikTrip. This position needs to intently focus on prioritization and always seek the improvement of processes and tools, providing recommendations to senior staff. A successful CSOC Operations Engineer II will have a multidisciplinary background beyond cyber security, with knowledge in fields such as client and server systems, networking, and application development. This position will also ensure systems and processes are following regulatory requirements, such as PCI-DSS, HIPAA and SOX. This position is responsible for providing second level support for cyber security issues and event response.

Major Functions:

Cyber Security Incident Response – 15% of total job

• Participate in Cyber Security Incident Response (CSIRT) as an incident responder, remediating serious attacks escalated from junior team members, assessing the scope of attack and affected systems, and collecting data for further analysis.
• Continuously develop and improve security technologies and processes, focusing on the improvement of automated and orchestrated capabilities.
• Ownership of documentation for active incidents, during an incident for the life cycle of the incident, and collection of post-mortem artifacts.

Cyber Security Infrastructure Operation – 70% of total job

• Provide second tier support, with advanced expertise of all QuikTrip cyber security technologies both during business hours and on-call.
• Develop, execute, and maintain a Preventative Maintenance and Management schedule for all cyber security appliances, hardware and software components.
• Provide guidance and support to the other operational infrastructure and application teams for problem management, service outages, service requests, and changes.
• Work directly with external vendors, carriers, and other IT operations personnel to configure security solutions and resolve support issues.
• Provide guidance and support to the other infrastructure and application teams for problem management, service outages, service requests, and changes.

Cyber Security Threat Operations – 15% of total job

• Perform second tier analysis of exploits such as malware, network intrusions, and unauthorized use to help determine attack-surface, patient zero, and possible pivot-points for escalation.
• Investigate notable/suspicious events from various operating systems, network platforms, application logs, cloud platforms, and cyber security tools.
• Identify, analyze and assist in responding to malicious activity, gather evidence for and assist in recommending which events should be declared as a cyber security incident.
• Maintain currency on monitoring, detection, prevention, analysis, and investigation techniques/tools, and adversary techniques, and make recommendations for improving cyber security event processes, procedures and tooling.
• Participate in regular table-top sessions with the Cyber Security team to determine appropriate actions required to address new developing security threats and potential customer impact.
• Work with senior analysts to maintain system baselines and configuration management expectations, including cyber security event monitoring policies in a timely manner.

Position In Organization:

Reports to: Cyber Security Operations Lead

Relationships:

Inside the Company : All QuikTrip personnel.

Outside the Company : Hardware and software vendors, personnel in other companies involved in supporting cyber security tools or for triage of incidents.

Position Specifications:

Required Education: Associates in relevant field or the equivalent combination of education and experience.

Desired Education: Bachelor’s degree in Cyber Security or a degree in a technology related field. Multiple industry certifications in Security, Systems Administration, and/or Networking, such as GDSA, PCNSE or PCSAE.

Required Experience : Minimum of 4 years of progressive experience with security technology design, administration or incident response in large, complex environments, particularly in multi-region retail. Experience in cryptography, network defense, endpoint protection, forensics, data protection, and incident response. Understanding of data center technologies and concepts including services, security, infrastructure design, disaster recovery practices. Experience troubleshooting of IT systems. Experience with compliance standards such as HIPAA, PCI, and SOX.

Desired Experience : Experience in all aspects of cyber security technologies and knowledge in threat management and support of large, complex cyber security environments. Experience in using a technical backlog to drive continuous improvement of technology and practices.

Required Skills: Experience with next generation firewalls, IDS/IPS, network access control, email and web security, digital forensics, endpoint detection and response, vulnerability scanning and analysis, data protection, credential vaulting, certificate management, Multi-Factor, access brokering, SIEM, public cloud compliance and Cybersecurity automation and orchestration technologies. Experience in planning and tracking the execution of efforts. The ability to communicate effectively to both business and IT staff in a professional manner.

Desired Skills: Working experience with Active Directory and Microsoft and/or Linux OS, networking, identity and access management, wireless networking and security, penetration testing, incident response, and application security methodologies. Understanding of encryption systems and methodology. Experience in scripting or software development or secure coding techniques.

Additional Criteria: This position will require shift work that could include weekends and nights as dictated by support needs. On call 24/7. Must have knowledge of many areas and be able to switch between them rapidly. Must be able to work under pressure and provide guidance to Information Technology and business users during a crisis. This position will require ability to maintain absolute confidentiality of information or events due to the sensitivity of their nature.

Starting Salary: $103,300-$129,200