SSAB is one of the largest North American producers of steel plate and coil, serving many industrial markets including energy, construction, agriculture and transportation. SSAB operates five state of the art facilities strategically located in key regions across the U.S.
SSAB has nearly 1,200 highly skilled employees in the U.S. Jobs at SSAB range from machine operators and sales people to advanced engineers and corporate professionals in HR, finance and more. SSAB offers challenging careers and comprehensive benefit program designed to keep employees and their families healthy and secure.
Job purpose:
This Information Technology position assists in the operation of existing programs protecting the confidentiality, integrity and availability of organizational assets including data, employees and physical assets. This role will assist in operating established programs such as a Vulnerability management program and act as a backup for the Awareness and Training program. The position will be responsible for gathering, analyzing, documenting and presenting key indicators for reports and additional related duties. Additional duties will include documentation of digital investigations.
Duties and responsibilities:
Oversee and Govern
•Provides primary support for the ongoing Vulnerability Management program, to develop strategies to reduce risk in existing assets and ensure that policies and procedures align with the SSAB Library of IT Controls.
•Prepare reports and present data in monthly team reviews to keep organizational stakeholders appraised of security activities.
•Conduct local training as part of a team effort.
•Develop detailed security documentation and document cybersecurity countermeasures and risk mitigation strategies
Analyze
•Determine the validity of trend data.
•Advise Information management on risk levels and security posture of assets.
•Assess the effectiveness of cybersecurity measures utilized by systems.
•Develop content for vulnerability assessment tool(s).
•Analyzing new methods used by cyber criminals.
Protect and Defend
•Review results of network scans, conduct threats assessments and rank vulnerabilities based on risk
•As part of Vulnerability Management, the candidate will assist in identifying configuration drift and assessing the level of risks presented by configuration drift. Recommend appropriate countermeasures.
•Work with the vulnerability management team to identify opportunities and assist in the coordination of mitigating countermeasures.
•Candidate will assist with Incidents in accordance with the SSAB Americas Cybersecurity & Privacy Incident Response Plan.
Investigate
•Apply Tactics, techniques and procedures for a full range of investigative tools and processes as part of an Enterprise Incident Response team.
•Collect, and preserve digital evidence for analysis in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, supporting internal audit and legal teams.
•Test various security strategies and defenses.
•Document investigations based on existing processes
Job Knowledge and Skills
•Limited experience required using Industry Standard forensic data collection and reporting tools such as FTK Imager and Autopsy.
•Knowledge of basic systems, Network, and OS hardening techniques.
•Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), Network Time protocol (NTP) and Active Directory services.
•Skill in applying host based or network access controls
•Provide initial user training including user documentation and training materials
•Provide the manager with weekly status updates and escalate issues if necessary
•Presentation development
Qualifications: Education and Experience:Required Education:
•Associate’s degree in Computer Science
Preferred Education:
•Bachelors degree in Computer Science or related field
Required Experience:
•Experience in compliance programs, vulnerability management and documentation of digital investigations
•High level of personal integrity
•Strong written and verbal communication skills
•Analytical, problem solving and troubleshooting skills
•Ability to multi-task and manage priorities
•Ability to develop interpersonal relationships with customers and peers
•Experience in team training facilitation
•Knowledge of regulatory and compliance requirements
•Regular and reliable attendance
Preferred Experience
•Understanding of the NIST Cyber framework and experience with v2024 Secure Control framework
•Experience managing Ivanti RBVM system
•Experience managing the KnowBe4 admin console in the user management module
•Experience scheduling service through the front and back end of ServiceNow
Department of Defense CUI Training Proof of Completion
•Completion of FEMA IS-0100.C Introduction to the National Incident Command System
Working conditions:
This position operates in an office environment, The role routinely uses standard office equipment such as computers, network tools/equipment, phones, photocopiers and scanners. This role is mostly sedentary; however, some handling of materials is required. This would require the ability to sit, stand and/or walk, bend, kneel, use of hands to finger, hold and handle, reach with hands and arms and to push/pull, lift or carry items up to 30 lbs.
The position requires the following vision and hearing capabilities:
•Talking person to person, on the phone, and/or in group settings
•Hearing in person, on the phone, and/or in group settings
•Vision at near, mid, and far range and depth perception
Position Type – Work Hours – Travel Requirements:
•Position works day shift, Monday through Friday – overtime as needed
•Office presence required
•Travel up to 10% of the time in the field or at other SSAB locations
SSAB BENEFITS – starting at hire!
•Excellent Pay with Additional Bonus
•Very Affordable Health Insurance
•Blue Cross/Blue Shield Medical
•CVS/Caremark Prescription
•401(k) with Employer Match
Company Paid Life Insurance, STD and LTD
•Optional Life, Hospital Indemnity, Critical Illness
•Flexible Spending Accounts (FSA); Healthcare and Dependent Care
•Employee Assistance Program
SSAB's vision is a stronger, lighter and more sustainable world.
SSAB's values form the guiding principles of our company.
They shape our culture and characteristics. They serve as a compass for our actions and behavior, and describe what we stand for. Values guide us daily in making the right choices and doing the right things.
SSAB's values are:
•Driven - Together we create value