Senior IT Security Administrator

As we establish our India Engineering Center of Excellence (COE), we are looking for an experienced Senior IT Security Administrator at Bitwarden, you will be responsible for a wide range of tasks, including the day-to-day administration of IT tools, cybersecurity tools and devices, as well as providing first-tier and second-tier support for our security operations center (SoC) and our security information and event management (SIEM). This is a hands-on role that requires a high level of technical expertise across a broad range of technologies and services. Additional responsibilities include the security administration of a wide variety of IT systems across the enterprise, including endpoint devices, in addition to providing support for our various assessment and audit related projects. The Senior IT Security Administrator will be involved in our security and IT roadmap discussions and planning, and will be responsible for creating and responding to new and existing security and IT work requests that are on our related work ticket boards. The Security and IT team are very active, we work with all teams across the organization every single day. This role reports directly to the Head of Information Security. The role requires work coverage aligned with Indian Standard Time (IST). We do not offer visa sponsorship at this time.

Responsibilities

Day-to-day administration of IT tools, cybersecurity tools and devices; Providing first-tier and second-tier support for security operations center (SOC) and security information and event management (SIEM); Security administration of IT systems across the enterprise, including endpoint devices; Providing support for assessment and audit related projects; Participating in security and IT roadmap discussions and planning; Creating and responding to new and existing security and IT work requests on related work ticket boards; Administers and maintains end-user accounts, permissions and access rights for all systems and services in accordance with defined policies, standards and procedures; Responds to, and where appropriate, resolves or escalates security incidents and investigations; Monitor and investigate Zscaler Internet Access (ZIA) DLP alerts to identify potential data leakage and policy violations; Monitor BolsterAI to identify phishing websites, malicious domains, and brand impersonation attempts; Monitors and reviews system logs, SOC and SIEM tools and network traffic for unusual or suspicious activity and makes recommendations for resolution; Security and IT tasks related to auditing, access management, and licensing users across various departments; Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as SOC2, HIPAA, and GDPR; Administer and maintain endpoint protection and security utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), and other endpoint protection and security solutions; Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines; Document related IT process and procedures; Assist with keeping all systems and endpoint devices secure and operational with minimal downtime, including Endpoint/Asset standardization and maintaining OS and system updates/patches, leveraging policy enforcements managed via MDM

Requirements

Strong 8-10 years experience as an Senior IT Security Administrator leading IT teams within a software engineering organization; Should have 3-5 years of strong hands-on expertise with configuring and administering/maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc); Should have strong hands-on expertise with configuring and administering/maintaining ZScaler related services, including ZPA, ZIA, and ZScaler DLP; A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise; Experience managing equipment and software across a distributed, remote, and decentralized workforce; Ability to maintain discretion, handle sensitive information and maintain security best-practices; Interested in solving security and IT challenges through technical awareness, assurance, and partnership; Security technocrat at heart, staying current with trends and new technologies; Collaborative and adaptable mindset; Openness and authenticity combined with excellent communication skills; Excitement and enthusiasm for open source and for better internet security; Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions; Experience with documenting complex security solutions and conveying knowledge to other team members; Work coverage aligned with Indian Standard Time (IST)

Nice to have

User of Bitwarden; Experience in the SecOps world and ability to apply security best practices across the organization; Experience with various MDM solutions; Azure/AWS management experience

Benefits

Opportunity to play a foundational role in shaping our India Engineering COE from the ground up; Our user community loves us and we love them; Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone; Become an expert; Immersion in the prominent technology markets of security and open source software; Work alongside talented global teams; Solve meaningful engineering challenges; Influence how we scale our engineering organization; Contribute to products used by customers around the world