Information Security Specialist

Job Purpose: (Briefly describe what the position was created to accomplish)

This position will work with the Arch Coal Information Security team to ensure confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, implementation, maintenance, and enhancement of information technology, security procedures and tools.  This will be accomplished by performing day-to-day monitoring, management and maintenance of established security controls and systems designed to reduce risk.  There will be an ongoing focus for enhancing Operational/ICS/SCADA security.

• Provide first level of support to resolve all Information Security related issues on a 24/7 basis.
• Assist in design, support, management and troubleshooting of security solutions including gateway antivirus, site-to-site VPNs, URL filtering, proxy server, network security monitoring, intrusion detection/prevention, 2-factor authentication, enterprise firewalls, laptop and wireless security solutions, VPN users, VPN server, etc. 
• Assist in researching, evaluating, recommending and implementing new security technologies and solutions to continuously improve the overall security posture. Work with vendors to solve issues pertaining to products (hardware and software).
• Identify system vulnerabilities and possible threats and then apply the requisite safeguards (technical and administrative) to reduce risk.
• Assist in development of Business Continuity plans, processes, procedures, and ensuring vital resources are backed up and recoverable. Perform risk assessments on the ICS.SCADA networks, business networks, and system changes. Identify, analyze and mitigate potential security risks, vulnerabilities and possible threats that may arise in the assessments, and then apply safeguards (technical and administrative) to reduce risk. Assist in performing network security assessments for evidence of vulnerability or compromise, assist/coordinate remediation, track resolution, and prepare reports.  Assessments work may be done independently or in coordination with Internal/External audit.
• Compile and review all security logs, alert tools, and other data collection mechanisms for troubleshooting and anomalies. 
• Create and evaluate technical security metrics reports.

Minimum Required Qualifications: (Include education, experience, physical requirements, special skills and licenses or certifications required.)

• Experience working with desktop and server operating systems.
• Excellent customer service, interpersonal, and team skills.
• Ability to communicate effectively in written and oral communications.
• Strong analytical and problem-solving skills.
• Strong operational and technical experience with Windows and Linux Systems.
• Firm comprehension of network design, architecture and protocols
• Ability to travel on an infrequent basis (less than 5%)

Preferred Qualifications: (Preferred, but not required, to successfully perform the requirements of the job)

• Operational and technical experience with Unix/Linux systems.
• 5 years information technology experience.
• 2 years technical experience with Information Security technologies (hardware, and/or software) i.e Sophos, Juniper, Checkpoint.
• Practical hands-on experience with implementation and administration of firewalls, Intrusion Prevention Systems, Proxy servers, VPN solutions, and URL filtering.
• Experience interfacing with third party VARs in the Information Security area.
• Experience using Service Desk management software.
• Experience with vulnerability management and alerting.
• Experience working with enterprise wireless networks.
• InfoSec Certification - desirable

Equipment Used: (Beyond general business equipment such as PC, fax, copier, printer, etc.)

• Windows/Linux servers and desktops operationally
• VPN Technologies
• Firewalls and various other security technologies

Current Openings for Information Security Specialist Jobs at Arch Resources