This role requires a broad skillset within the security field including technical and analytical skills. The role will report to the Director Information Security at Serta Simmons Bedding, LLC. This position will require a mix of soft skills (internal consulting, security subject matter expertise and security vendor management) as well as technical skills requiring hands on security tool configuration and administration. This position will be responsible for managing inputs and outputs from our MSSP (Managed Security Services Provider). The role will be responsible for attending and participating in security and business driven projects and change management committees. This includes interacting with business units and technical teams to understand their roadmap and how their projects can be designed and implemented with security in mind.

• Experience working with Managed Security Service Provider
• Prior hands on experience with firewalls, routers, switches (especially Palo Alto, Cisco, Meraki)
• Prior hands on experience with IDS/IPS (especially Palo Alto)
• Experience with DLP (Data Loss Prevention) tools and processes
• Prior hands on experience with vulnerability management tools (such as Rapid 7)
• Prior hands on experience with EDR (endpoint detection and response) tools (such as Carbon Black)
• Prior hands on experience with CASB (cloud access security broker) tools (such as Netskope)
• Prior hands on experience with web filtering tools (such as Cisco Umbrella)
• Skilled in meeting vulnerability and penetration testing requirements.
• Experience with Identity and Access management tools and processes.
• Excellent written and verbal communication skills. Ability to explain technical concepts to technical or non-technical personnel
• Experience with internal project consulting and providing security requirements and recommendations for secure project implementations

• 5+ years' experience in Information Security
• Have an understanding and working knowledge of regulatory requirements such as PCI, SOX
• Familiarity with ISO and NIST standards for security.
• Highly technical and analytical, with a proven, deep cybersecurity background in technology design, implementation and delivery.
• Experience with threat and vulnerability management, tools and processes (Rapid 7, Burpsuite, IDS/IPS)
• Experience with security issue/incident investigations and incident response including reviewing logs and system events.
• Research, validate and deploy solutions meeting security and business needs.
• Experience in reviewing and approving firewall rules (but will not be responsible for implementing or managing firewalls)
• Must be able to work independently with minimal supervision
• One or more Security Certifications such as: CISSP, CEH, CISA, CISM, GIAC, CRISC
• Ability to work a flexible schedule based on department and company needs
• Ability to be on call 24x7 when needed