IT Security Specialist (Pre-Incident Consulting & Incident Response Lead)

{
  "content_hash": "b93ee149aab690d77fa67e40d5aa8971558a8705c5600c20651e9345ebe22e36",
  "source_hash": "3c3bf41deff130af1b4d88022e2e9a23939c3e698137697709b19085298f1583",
  "last_changed_at": "2026-05-30T06:11:38.947Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Louisville, Kentucky, 40223, United States",
    "city": "Louisville",
    "region": null,
    "country": "United States",
    "is_remote": false,
    "confidence": 0.95
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T10:31:12.086Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Louisville, Kentucky, 40223, United States",
      "city": "Louisville",
      "region": null,
      "country": "United States",
      "is_remote": false,
      "confidence": 0.95
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "47",
    "isRemote": null,
    "location": {
      "city": "Louisville",
      "state": "Kentucky"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "18588",
    "locationType": "2",
    "jobOpeningName": "IT Security Specialist (Pre-Incident Consulting & Incident Response Lead)",
    "departmentLabel": "Consulting Services",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "Louisville",
      "state": "Kentucky",
      "postalCode": "40223",
      "addressCountry": "United States"
    },
    "datePosted": "2026-04-28",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p>Mirazon is a scaling, people-centered IT company that believes strong security starts long before an incident occurs, and that calm, capable leadership matters most when it does. We’re looking for a <span><span style=\"font-weight: bold\">Security Specialist</span></span> who thrives at the intersection of strategy and execution: someone who enjoys strengthening security postures proactively and who can step confidently into high-pressure situations to guide clients through complex cybersecurity events.</p>\n<p><br></p>\n<p><span style=\"font-size: 14pt; font-weight: bold\">Mission of the Position</span></p>\n<p>This role is designed for an experienced individual contributor with deep technical expertise, sound judgment, and executive presence. You value preparation, documentation, and disciplined processes, and you’re equally comfortable designing preventative controls as you are leading incident response efforts in real time. You bring clarity to chaos, translate technical risk into business impact, and act as a trusted advisor to clients when the stakes are highest.<br></p>\n<p><br></p>\n<p><span style=\"font-size: 14pt; font-weight: bold\">Key Criteria/Requirements</span><br></p>\n<ul>\n<li>5+ years in cybersecurity or infrastructure security roles</li>\n<li>3+ years leading security incidents</li>\n<li>Strong experience with:\n<ul>\n<li>Firewalls (FortiGate, Cisco, SonicWall, Palo Alto, etc.)</li>\n<li>Endpoint detection and response (EDR/XDR)</li>\n<li>Microsoft 365 security stack</li>\n<li>Identity and access management</li>\n<li>Backup and disaster recovery systems</li>\n</ul>\n</li>\n<li>Experience with ransomware containment and recovery</li>\n<li>Deep understanding of networking and Active Directory environments</li>\n<li>Strong written and verbal communication skills</li>\n<li>Ability to lead under pressure</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Preferred Certifications</span></p>\n<ul>\n<li>CISSP</li>\n<li>CISM</li>\n<li>CEH</li>\n<li>GIAC (GCIA, GCIH, etc.)</li>\n<li>Security+</li>\n<li>Microsoft Security certifications</li>\n<li>Vendor firewall certifications</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 14pt; font-weight: bold\">Key Accountabilities</span></p>\n<p><span style=\"font-size: 12pt; font-weight: bold\">1. Pre-Incident Security Consulting (Strategic &amp; Preventative)</span></p>\n<ul>\n<li>Conduct comprehensive security risk assessments and gap analyses</li>\n<li>Lead cybersecurity maturity assessments aligned to NIST, CIS, or industry frameworks</li>\n<li>Perform vulnerability assessments and coordinate remediation planning</li>\n<li>Design and review:\n<ul>\n<li>Network security architecture</li>\n<li>Firewall and segmentation strategies</li>\n<li>Endpoint security strategies</li>\n<li>MFA and identity security implementation</li>\n</ul>\n</li>\n<li>Develop incident response plans and business continuity playbooks</li>\n<li>Conduct tabletop exercises with client executive teams</li>\n<li>Provide executive-level reporting with risk prioritization and budget guidance</li>\n<li>Assist sales/engineering with scoping security engagements and SOW development</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">2. Incident Response Leadership</span></p>\n<ul>\n<li>Serve as Incident Response Lead during cybersecurity events</li>\n<li>Direct containment, eradication, and recovery efforts</li>\n<li>Coordinate with:\n<ul>\n<li>Internal engineering teams</li>\n<li>Client leadership</li>\n<li>Insurance carriers</li>\n<li>Legal counsel</li>\n<li>Forensics vendors</li>\n</ul>\n</li>\n<li>Perform initial triage and determine scope of compromise</li>\n<li>Oversee forensic evidence preservation</li>\n<li>Guide ransomware response and recovery strategy</li>\n<li>Lead root-cause analysis and post-incident reporting</li>\n<li>Develop corrective action plans</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">3. Client &amp; Executive Communication</span></p>\n<ul>\n<li>Act as trusted advisor to C-suite and ownership groups</li>\n<li>Translate technical findings into business risk language</li>\n<li>Present findings and remediation plans in board-level settings</li>\n<li>Provide calm, decisive leadership during crisis situations</li>\n<li>Maintain strict confidentiality and professionalism</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">4. Documentation &amp; Process Development</span></p>\n<ul>\n<li>Maintain standardized security assessment templates</li>\n<li>Develop and refine internal IR procedures</li>\n<li>Create security standards and best practices</li>\n<li>Ensure all engagements are properly documented in PSA systems</li>\n<li>Contribute to continuous improvement of security offerings</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 14pt; font-weight: bold\">Insurance Benefits</span></p>\n<p><span>Eligibility begins the first day of full-time employment (date of hire).</span></p>\n<ul>\n<li><span>Life Insurance</span><span> </span></li>\n</ul>\n<ul>\n<li><span>Short-term Disability </span><span> </span></li>\n</ul>\n<ul>\n<li><span>Long-term Disability </span><span> </span></li>\n</ul>\n<ul>\n<li><span>Cafeteria Plan – Premium, Medical, &amp; Child Care Reimbursement</span><span> </span></li>\n</ul>\n<ul>\n<li><span>Health Insurance  </span><span> </span></li>\n</ul>\n<ul>\n<li><span>Dental Plan </span><span> </span></li>\n<li><span>Vision Plan </span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-size: 14pt; font-weight: bold\">Other Benefits</span></p>\n<ul>\n<li><span>401K Matching</span></li>\n</ul>\n<ul>\n<li><span>Referral Bonuses</span><span> </span></li>\n</ul>\n<ul>\n<li><span>Tuition Reimbursement</span><span> </span></li>\n</ul>\n<ul>\n<li><span>Performance Incentives</span></li>\n</ul>\n<ul>\n<li><span>Time Off – benefits accrue on a pro-rated basis each pay period over a 12-month period with the following maximums:</span><span> </span></li>\n</ul>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li><span>Vacation Time – 10 days per calendar year</span></li>\n</ul>\n</li>\n</ul>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li><span>Sick Leave – 5 days per calendar year</span><span> </span></li>\n</ul>\n</li>\n</ul>\n<ul>\n<li><span>Paid Company Holidays (7)</span></li>\n<li><span>Paid Floating Holidays (2)</span></li>\n<li><span>Volunteer 1</span></li>\n<li><span>Cell Phone &amp; Internet Reimbursement</span></li>\n</ul>",
    "compensation": "$90,000-$120,000",
    "departmentId": "18588",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "IT Security Specialist (Pre-Incident Consulting & Incident Response Lead)",
    "departmentLabel": "Consulting Services",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Experienced",
    "jobOpeningShareUrl": "https://mirazon.bamboohr.com/careers/47",
    "employmentStatusLabel": "Full-Time"
  }
}