Security Administrator
$89,040–$133,560 year
On-siteKent, Washington, United States
Job Summary
Administer and maintain security tools and systems across cloud and on-premise environments, including identity, endpoint, network, vulnerability management, and security logging platforms. Monitor and analyze security alerts, investigate suspicious activity, and support the response to potential security incidents. Implement and maintain security configurations, policies, standards, and procedures aligned with NIST 800-53/171, SOC 2, and ISO 27001 frameworks. Support risk assessment by identifying, documenting, and remediating information security risks while conducting regular access reviews and system configuration audits. Collaborate with cross-functional teams to integrate security controls into business processes and assist with onboarding and offboarding activities. Maintain documentation and evidence required for audit readiness.
Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
- Strong understanding of IT infrastructure, including applications, networks, servers, storage, endpoints, identity systems, logging architectures, and cloud technologies
- Experience administering enterprise security tools and implementing technical security controls
- Experience reviewing security alerts, logs, and system activity to identify, investigate, and resolve security issues
- Strong analytical and troubleshooting skills, with the ability to correlate information across multiple systems and determine appropriate remediation actions
- Ability to prioritize security findings based on risk, impact, exploitability, and operational context
- 3+ years of experience in information security, systems administration, security operations, or a related technical field
- Working knowledge of relevant security and compliance frameworks, such as NIST 800-53/171, SOC 2, and ISO 27001
- Ability to create and maintain clear technical documentation, investigation records, procedures, remediation plans, and audit evidence
- Ability to work independently, follow issues through resolution, and coordinate effectively with technical and nontechnical stakeholders
- Must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State
- Must complete an Employment Eligibility Verification Form I-9 at the start of employment
- Must be able to prove your identity and authorization to work in the U.S. for the Company
- Must comply with the United States Citizenship and Immigration Services employment verification requirements
- Must have legal authorization to work with or have access to export control materials as necessary to perform the job
Desired Qualifications
- Experience administering security platforms such as SIEM, endpoint detection and response, vulnerability management, identity and access management, mobile device management, or data loss prevention tools
- Hands-on experience reviewing and correlating logs from endpoints, identity providers, cloud platforms, firewalls, applications, servers, and network security systems
- Experience creating and tuning SIEM queries, dashboards, correlation rules, alerting logic, and automated response workflows
- Experience investigating security alerts, documenting findings, coordinating remediation, and verifying corrective actions
- Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, CUI handling, or similar control frameworks
- Experience with Microsoft security and administration platforms, including Entra ID, Microsoft 365, Intune, Defender, or Microsoft Sentinel
- Experience supporting vulnerability remediation, access reviews, incident response, security monitoring, log management, and audit evidence collection
- Familiarity with scripting or automation using PowerShell, Python, Bash, KQL, or similar tools
- Experience identifying monitoring gaps and onboarding systems, applications, or security data sources into a centralized logging or SIEM platform
- Experience in environments subject to strict data-protection or government-driven security requirements
- Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security administration
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.