{"id":2479209,"url":"https://alion.io/job/ita-group-information-security-administrator","title":"Information Security Administrator","company":{"id":1832732,"name":"ITA Group","domain":"itagroup.com","url":"https://alion.io/company/itagroup-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Des Moines, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":62000,"max_usd":127000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":325},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"ISO 27001","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NIST CSF","optional":true},{"name":"PCI DSS","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SOC 2","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-13T21:45:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-21T03:19:34Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"POSITION PURPOSE\nThe Information Security Administrator supports the protection of ITA Group's systems, networks, endpoints, cloud environments, applications, and data. This role performs security operations, investigates alerts, administers security technologies, supports incident response, and partners with internal technology teams and the organization's external Managed Detection and Response (MDR) provider.\nThe Administrator is expected to be technically curious and capable of independently performing security triage and investigation when needed. The MDR is an operational partner, but internal accountability remains with ITA Group. This position validates provider findings, challenges incomplete conclusions, helps tune detections and playbooks, and contributes to the continued maturity of security operations.\nACCOUNTABILITIES & PERFORMANCE EXPECTATIONS\nSecurity Operations, Incident Response, and MDR Partnership\nMonitor and investigate alerts from MDR/SIEM, EDR/XDR, identity, endpoint, network, cloud, email, proxy, CASB, DLP, and vulnerability platforms.\nPerform initial and intermediate triage to determine credibility, scope, severity, and business impact; document findings and recommended actions.\nValidate MDR investigations, severity assignments, and recommended response actions; independently investigate when evidence is incomplete, inconsistent, or high risk.\nPartner with the MDR to tune detections, reduce false positives, improve escalation criteria, and mature joint incident-response playbooks and operating procedures.\nParticipate in containment, eradication, recovery, post-incident review, and root-cause analysis activities.\nCoordinate investigations and remediation with infrastructure, networking, cloud, application, Service Desk, and third-party teams.\nSecurity Technology and Control Administration\nSupport administration and health monitoring of endpoint security, EDR/XDR, secure web gateway/proxy, SIEM, CSPM, CASB, DLP, vulnerability management, and related security platforms.\nInvestigate malware, suspicious processes, authentication anomalies, risky cloud activity, data movement, policy violations, and abnormal network or web traffic.\nReview CSPM findings across Microsoft Azure, AWS, Microsoft 365, and other supported platforms; assist owners with prioritization, remediation, and validation.\nSupport CASB and DLP policies and investigations involving cloud applications, email, endpoints, collaboration platforms, web traffic, and removable media.\nPerform routine platform maintenance, policy updates, testing, agent deployment support, integrations, vendor coordination, and lifecycle activities.\nVulnerability and Application Security\nReview and prioritize vulnerabilities affecting endpoints, servers, network devices, cloud resources, applications, and externally facing services.\nTrack remediation and validate corrective actions using severity, exploitability, exposure, asset criticality, and business context.\nREQUIRED QUALIFICATIONS\nAssociate or bachelor's degree in cybersecurity, information security, information technology, computer science, networking, or a related field; equivalent professional experience may be considered.\nThree to five years of combined experience in information technology, information security, security operations, systems administration, network support, cloud operations, or a related technical discipline.\nAt least one to two years of direct experience performing security monitoring, alert triage, incident investigation, vulnerability management, or security-platform administration.\nPrior technical experience in a help desk, desktop support, network operations, systems administration, cloud support, SOC, MDR, MSSP, or similar environment.\nCurrent CompTIA Security+ or CySA+ certification. Equivalent or more advanced security certifications may be considered when supported by relevant practical experience.\nWorking knowledge of security operations, SOC processes, alert triage, incident response, log analysis, and event correlation.\nAbility to independently assess whether activity is legitimate, suspicious, or malicious and to collect and document supporting evidence.\nApplied understanding of the OSI model, TCP/IP, DNS, HTTP/HTTPS, TLS, common ports and protocols, routing, VPNs, firewalls, and network traffic flows.\nFamiliarity with endpoint security, secure web gateways/proxies, SIEM, CSPM, CASB, DLP, vulnerability scanning, cloud security, identity security, and application-security testing.\nFamiliarity with Microsoft 365, Microsoft Entra ID, Microsoft Azure, AWS, authentication, authorization, multifactor authentication, and privileged access concepts.\nStrong customer service, troubleshooting, analytical, written, verbal, and cross-functional collaboration skills; ability to handle sensitive information appropriately.\nAbility to listen, understand and respond to external and internal customers’ needs in a timely manner; customer service experience in a service-related industry preferred.\nAbility to work the time necessary to complete projects and/or meet deadlines.\nPREFERRED QUALIFICATIONS\nExperience working for or directly with an MDR provider, MSSP, internal SOC, or managed security-monitoring service.\nExperience validating third-party investigations, independently performing follow-up analysis, and improving alert tuning, escalation criteria, or playbooks.\nExperience with endpoint security, SIEM, secure web gateway/proxy, CSPM, CASB, DLP, vulnerability management, or application-security tools.\nFamiliarity with PowerShell, Python, KQL, SQL, regular expressions, CIS Controls, NIST CSF, MITRE ATT&CK, PCI DSS, SOC 2, or ISO 27001.\nTo perform this job successfully, an individual must be able to complete each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill and/or ability required.\nITA Group, Inc. is an Equal Opportunity Employer. In compliance with the Americans with Disabilities Act, the Company will consider reasonable accommodations for qualified individuals with disabilities and encourage prospective employees and incumbents to discuss potential accommodations with the Company.","description_format":"text","description_chars":6186,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Event Management","Corporate Events"],"lifecycle":[{"event":"open","at":"2026-10-13T22:13:21Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":64,"reasons":["conf:2","win:early","comp:junior"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ita-group-information-security-administrator","json_url":"https://alion.io/job/ita-group-information-security-administrator.json","meta":{"generated_at":"2026-10-21T04:47:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1832732},"rest":"https://alion.io/mcp/rest/get_company?id=1832732"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fita-group-information-security-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fita-group-information-security-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fita-group-information-security-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ita-group-information-security-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fita-group-information-security-administrator"}]}