InMotion Hosting has an excellent opportunity for a person with the skills and interests to be part of the exciting field of information security and gain valuable knowledge and experience. There will be unique opportunities in different areas of infrastructure and security, including security design and architecture, compliance, threat and vulnerability management, penetration testing and more.

We are looking to fill a Tier 3 Security Operations Analyst position to monitor, manage and remediate threats to our customers and our infrastructure.

What You’ll Do:

• Monitor centralized logging systems, dashboards, as well as intrusion detection systems for potential threats.
• Review latest Common Vulnerabilities and Exposures (CVE) advisories as they apply to our technology stack.
• Detect potential intrusions and compromises through review and analysis of relevant logs and analytic tools.
• Maintain custom access-lists (ACLs) and firewall rules in order to prevent unauthorized access to certain assets.
• Maintain custom mod_security rule sets on various hosting platforms to prevent malicious activity from exposed web servers
• Perform security incident investigations on servers and networks, while preserving evidence for potential legal action.
• Provide comprehensive maintenance plans for change to management.
• Initiate escalation procedure to counteract potential threats/vulnerabilities as needed and advise management on incidents.
• Document and execute on processes related to regular security auditing, risk assessments and penetration testing.
• Perform updates and apply patches to vulnerable applications, libraries or packages as needed.
• Perform regular password rotations and compliance audits on server and network infrastructure.

What You’ll Get:

• A fun, relaxed working environment with a casual dress code (jeans ok).
• Profit Sharing twice yearly based on performance and hire date.
• Free weekly snacks and free lunch on Tuesdays.
• The opportunity to work with some of the best team members in the world.

Ideal Candidates Have:

• Two year degree or equivalent experience
• 3-5 years of system administration experience with Linux/UNIX, preferably supporting web operations/infrastructure.
• 1-2 years working with large/complex network with multi-tiered network topologies
• Ability identify, predict, and prioritize issues that may affect business operations or affect system/network security.
• Proficiency in at least one scripting language (bash, perl, python, ruby, etc).
• Experience with Layer 7 security concepts, including mod_security rules, WAF and effective htaccess/htpasswd protection.
• Expert technical troubleshooting ability and critical thinking skills.
• Strong knowledge of UNIX/Linux and its commands/utilities as both a user and administrator
• Experience with multiple Linux distributions, specifically CentOS/RedHat and Debian based distributions; understands difference between kernel and user space, knowledge of privilege escalation concepts.
• Thorough understanding of the “LAMP” stack (Linux, Apache, MySQL, PHP/Perl), including but not limited to securing and hardening of services and applications that comprise the stack.
• Advanced skills for best security practices with BIND, Apache, MySQL, PHP/Perl applications/scripts.
• Strong knowledge or ability to acquire knowledge of the the cPanel/Web Host Manager (WHM) platform; includes GUI and CLI tools as well as knowledge of internals and automation APIs.
• Knowledge of virtualization concepts and technologies.
• A solid understanding of networking/distributed computing environment concepts; understands principles of routing and switching, TCP/IP, access-lists.
• Strong understanding and experience leveraging «Puppet» for configuration management and standardization across thousands of hosts.
• Good inter-personal and communication skills.

The below is optional but can help make you a top candidate:

• A degree in computer science, information security, or a related field.
• Proficiency with Python.
• The ability to continue to evaluate situations and react appropriately under stress.
• Understanding of the challenges of load balancing and performance tuning in densely populated virtual environments.
• The ability to explain and simplify complex technical concepts to both customers and coworkers.
• The ability to produce technical documentation and assist with the preparation of training materials.

A few more things:

• Medical, Dental, Vision, Disability, Life Insurance, and 401K plans.
• Paid Time Off and Company Paid Holidays.
• Wear Jeans Everyday.
• Awesome Company Parties and Onsite Events.
• A free VPS.

Location:

• Virginia Beach, VA