SENIOR ENGINEER - SOC 2

Job description

**Role Overview:** We are seeking a skilled **File Integrity Monitoring (FIM) Engineer** to manage, optimize, and support enterprise FIM solutions, specifically **NNT Change Tracker**, across POS environments. The role involves ensuring platform stability, enhancing security monitoring, integrating with SOC operations, and maintaining compliance with PCI and enterprise security standards. **Key Responsibilities:** **Platform Management & Administration:** - Administer and manage **NNT Change Tracker FIM platform**, including deployment, configuration, optimization, and troubleshooting. - Ensure platform health, high availability, and secure operation across all **POS systems**. - Perform regular platform upgrades, patching, and performance tuning. **Onboarding & Offboarding:** - Manage onboarding of POS machines based on new store launches and PCI-scope requirements. - Configure and maintain FIM policies and monitoring rules. - Handle agent offboarding for store closures and decommissioning activities. **Monitoring & Issue Resolution:** - Monitor platform performance and proactively identify issues related to: - Application and console functionality - Communication with endpoints (POS machines) - Data flow and integrations - Troubleshoot and resolve platform, agent, and connectivity issues. - Engage with support teams to resolve anomalies impacting tool performance. **Health Monitoring & Availability:** - Continuously monitor asset health and availability within the FIM platform. - Ensure uninterrupted monitoring coverage by addressing downtime, failures, and performance bottlenecks. **SOC Integration & Alert Management:** - Integrate FIM with **SIEM and SOC platforms** for centralized monitoring. - Enable event forwarding, alert correlation, and escalation workflows. - Validate alert quality and conduct periodic tuning to reduce false positives and improve detection accuracy. **Vendor Coordination:** - Act as the primary point of contact for **NNT Change Tracker vendor**. - Manage technical support requests, issue escalations, and resolution tracking. - Coordinate product updates, enhancements, and patch deployments. **Access Management & Governance:** - Administer user access and roles within the FIM platform. - Conduct **quarterly access reviews** to ensure compliance with least privilege principles and audit requirements. **Documentation & SOP Management:** - Develop, maintain, and update **Standard Operating Procedures (SOPs)** covering: - Agent deployment and configuration - Incident response processes - Platform maintenance and upgrades - Integration workflows **Integration & Security Ecosystem Alignment:** - Integrate FIM platform with enterprise tools such as: - SIEM solutions - Threat intelligence platforms - Incident response and ticketing systems - Ensure FIM data enhances overall security visibility and monitoring effectiveness. **Business Continuity & Disaster Recovery:** - Develop and maintain **BC/DR plans** for the FIM platform and supporting infrastructure. - Conduct periodic testing to validate recovery processes and ensure resilience during disruptions. Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.