EDUCATION/EXPERIENCE REQUIREMENTS Bachelor’s degree in information security/cybersecurity, information technology, computer science or related field required. CrowdStrike Certified Falcon Administrator or similar. Three to five years of work experience in cyber security endpoint management or related position for large enterprises. PHYSICAL REQUIREMENTS Requires remaining in a stationary position for extended periods of time and constantly operating a computer. May be required to travel to various field locations. Must be able to lift, maneuver and carry material weighing up to 50 pounds. KNOWLEDGE, SKILLS, AND ABILITIES Strong problem-solver that can work autonomously and with others. Detailed knowledge of Windows, macOS, and Linux operating systems. Knowledge of file systems, processes, services/daemons. Knowledge of registry and system logs (especially Windows Event Viewer). Knowledge of permissions, file integrity, and OS hardening best practices. Knowledge of EDR, AV, MDM/UEM platforms. Understanding of scripting (PowerShell, Bash, Python). Detailed knowledge of Command Line Interface syntax and use. Knowledge of patch management tools (e.g., SCCM, Intune, WSUS). Awareness of endpoint vulnerabilities and hardening techniques. Familiarity with common vulnerabilities (CVEs, CVSS scores). Understanding MITRE ATT&CK framework as it applies to endpoints Awareness of NIST, ISO 27001, PCI-DSS, HIPAA, or similar frameworks. Knowledge of encryption technology, tools, and techniques. Understanding of TCP/IP, DNS, HTTP/S, VPNs, and how endpoints interact with networks. Knowledge of network security tools (e.g., firewalls, proxies) as they relate to endpoint communications Ability to maintain absolute confidentiality of sensitive files, data and materials accessed, discussed, or observed, and while adhering to security policies and procedures. WORKING CONDITIONS General office environment. May be required to travel to various field locations. Subject to various weather conditions when traveling to and from work locations. Subject to normal garage, shop, and terminal hazards such as noise, dust, grease, moving vehicles, etc. when working in bus/rail workshops, garages, and terminals. EQUIPMENT, TOOLS, AND MATERIALS UTILIZED Personal computer and related software as needed.

Employees and/or union members will be given priority consideration in the hiring process, per the applicable labor contracts.

Final salary will be determined in part by the qualifications of the selected candidate and may be higher or lower than target.

Applicants, if hired,must comply with CTA's residency ordinance.

CTA IS AN EQUAL OPPORTUNITY EMPLOYER

No employee or applicant for employment will be discriminated against because of race, color, creed, religion, sex, marital status, national origin, sexual orientation, ancestry, age, unfavorable military discharge, disability or any other status protected by federal, state, or local laws; except where a bona fide occupational qualification exists We are committed to providing an inclusive environment for our workforce and supporting the communities we serve. CTA will make reasonable accommodations for the known disabilities of otherwise qualified applicants for employment as well as its employees, unless undue hardship would result. If you require an accommodation in the application or hiring process, please contact arc@transitchicago.com prior to the submission of your application or upon notification of your actual test date. CTA will work with you to determine if an accommodation can be provided.

During the hiring process, CTA's Human Resources department will contact candidates with next steps . Failure to respond to these correspondences in a timely fashion may result in your application being closed out for non-responsiveness.

Please click link below to review the benefits offered at the CTA.

https://www.transitchicago.com/hrbenefits/