Southern Research
Birmingham, Alabama, United States
(on-site)
Posted
1 day ago
Job Function
Other
Description
Information Security Operations SpecialistInformation Security Operations Specialist
Southern Research + You
Discover a career where your work truly matters. Southern Research has been translating science into real-world solutions since 1941. Join our innovative team and enjoy benefits like medical, dental, vision, 401(k) match, life insurance, PTO, an employee assistance program, and more.
Discover a career where your work truly matters. Southern Research has been translating science into real-world solutions since 1941. Join our innovative team and enjoy benefits like medical, dental, vision, 401(k) match, life insurance, PTO, an employee assistance program, and more.
General Summary
The Information Security Operations Specialist oversees Southern Research Information Security (InfoSec) Operations and Incident Response. This role is responsible for building and running monitoring, detection, response, and vulnerability management capabilities that protect the confidentiality, integrity, and availability of Southern Research and customers' information and systems. The Information Security Operations Specialist will assist in the enforcement of information security policies and standards, as well as enforce and audit security policies and procedures which safeguard the integrity of and access to enterprise systems, files, and data elements. This role works with Information Technology and supports the Information Security Officer (ISO), Legal, HR, and business leaders to reduce cyber risk, mature security processes, and ensure alignment with the established security program and standards. This may include risk assessments and security briefings to advise stakeholders of critical issues that may impact security objectives. Overall, the Information Security Operations Specialist will commit to fostering an environment of heightened security by operationalizing Information Security Policies.
Essential Duties & Responsibilities
Security Operations & Monitoring
- Lead daily security and data loss prevention monitoring, alert triage, investigation, and escalation across endpoint, network, identity, email, and cloud environments.
- Ensure log collection, review, retention, and access supports operational needs and audit/forensic requirements.
- Maintain standard operating procedures, playbooks, and runbooks for common alert types and investigations.
- Contributes suggestions/improvements for increasing operational efficiency.
Incident Response & Investigations
- Lead the incident response program, including maintaining the incident response plan, playbooks, severity definitions, communications paths, and evidence-handling procedures aligned to NIST SP 800-61.
- Coordinate containment, eradication, and recovery activities for security incidents; engage the communication and escalation paths as necessary.
- Plan and lead live exercises and technical response drills; ensure lessons learned are documented and corrective actions are implemented.
- Submit incident documentation and reporting to the ISO for postmortem reviews and policy impacts.
Threat, Vulnerability & Exposure Management
- Manage the enterprise vulnerability management program (scanning, prioritization, remediation tracking, and reporting) across endpoints, servers, network devices, applications, and cloud workloads.
- Monitor emerging threats, exploited vulnerabilities, and relevant advisories; coordinate rapid response for high-risk exposures (e.g., critical CVEs). Partners with others to implement secure configuration baselines and hardening standards.
Business Continuity, Disaster Recovery & Resilience
- Support the ongoing development, testing, and improvement of IT disaster recovery and business continuity plans with security considerations incorporated.
- Assess and improve resiliency against disruptive events (e.g., ransomware), including backup security, recovery testing, and access controls for recovery processes.
Perform other duties and assist other employees, as assigned.
Requirements/Minimum Qualifications
- 5+ years of progressive experience in information security, including security operations, incident response, and vulnerability management.
- Demonstrated ability to lead security operations activities, interact and/or manage vendors/managed service providers as appropriate.
- Hands-on experience with security monitoring and response tooling, vulnerability scanning, patch/exposure management, and incident case management.
- Working knowledge of Information Risk Management frameworks, Information Security ISO standards and NIST standards in addition to legal and regulatory requirements.
- Strong analytical, documentation, and communication skills; ability to translate complex/technical findings into digestible business risks and recommended actions.
Preferred Qualifications
- Bachelor's Degree in Computer Sciences, Information Technology, Cybersecurity, or a related field.
- Security+, CySA+, SC-200 or other similar credentials.
- Cloud security and/or platform certifications (e.g., AWS, Azure, or Google Cloud security certifications).
Core Values
Cultivating human connection putting people first. We know that every individual makes a difference and that no one can do it alone. We believe the world's most powerful resource is human potential. We are an inclusive and courageous team where innovation and diversity of though go hand in hand. We understand that relationships move at the speed of trust.
Operating with precise execution measuring what matters and owning results as a team. We leverage data to drive decisions that advance science. We recognize the importance of a stable foundation coupled with an agile mindset. We hold ourselves accountable and take pride in our work. We give and receive candid feedback as a gift that keeps us growing.
Harnessing relentless curiosity our unstoppable, innovative force. We are driven to ask sharp questions and push the boundaries of knowledge. We use creativity and critical thinking as catalysts for finding solutions that change lives. We learn by doing, consistently striving to improve our relationships, training, methodologies, questions and results.
Stewarding a healthy community implementing sustainable operations for a safe, engaging environment. We don't compromise on safety and health for our employees, customers or community. We believe a healthy community begins with inclusive economic opportunities. We respect the dignity of the patients we ultimately serve. We are motivated to serve communities that are underserved and markets that are overlooked.
Job Specific Behaviors
Relationship Orientation Develops positive relationships by making others feel their concerns and contributions are important.
Continuous Learning Proactively seeks performance feedback and identifies approaches to improve personal and others performance and learning.
Tolerance for Stress, Ambiguity & Change Demonstrates flexibility in applying different approaches to changing work demands.
Effective Communication Creates a team environment in which information flows freely and decision making is based on a win-win philosophy.
Customer Focus Responds to customer's needs in a manner that provides added value and generates significant customer satisfaction.
Compliance Applies an understanding of legal precedents, policies, and practices to protect the interests of the organization.
Cross-team Collaboration Ensures integration and cooperation across organizational boundaries.
Service Development, Delivery, Refinement and Quality Manages service delivery to ensure high levels of customer impact and satisfaction. Constantly focuses on the continuous improvement of services and processes.
Physical Demands
This position is primarily an office position.
- Ability to perform work utilizing a computer for extended periods of time.
- Ability to sit for extended periods of time without being able to leave the work area.
- Participation in an on-call and/or after-hours response rotation may be required to support incident response and operational needs.
- For those times when it may be necessary to enter a laboratory environment, use of appropriate PPE is required.
Work Authorization
This position requires US citizenship.
Equal Employment Opportunity Statement
Southern Research is committed to providing equal employment opportunities to all individuals, regardless of race, color, national origin, ancestry, gender, sex, age, disability, religion, sexual orientation, gender identity, genetic information, veteran status, or any other characteristic protected by federal, state, or local laws.
We are an equal opportunity employer and seek to create a diverse and inclusive workplace. Our hiring, training, promotion, and compensation practices are based on the principles of fairness, equality, and merit.
Southern Research prohibits discrimination or harassment of any kind, including harassment based on any protected characteristic. We are committed to maintaining a work environment where all individuals are treated with respect, dignity, and fairness.
In addition, we provide reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state laws. We also offer support for individuals who require accommodations due to religious practices or beliefs.
If you have any concerns about discrimination or harassment, please contact humanresources@southernresearch.org immediately. We are committed to investigating all concerns thoroughly and promptly and taking appropriate corrective action when necessary.
PI282853303
Job ID: 82826328