The posting
At FORTÉ, every role plays a part in reimagining how the modern workplace works. Whether you're on the front lines with customers or behind the scenes making things run, your work helps people connect, collaborate, and get things done. From classrooms to control centers, we design and deliver the systems that power smarter, more connected workplaces – and it all starts with the people who make them possible. FORTÉ (formerly AVI Systems) is a 100% employee-owned company with 50+ years of experience and a bold new identity
This person will provide direct security support to FORTÉ employees, IT staff, and key stakeholders by monitoring, protecting, and improving the organization’s security posture. This role delivers Tier 2 security support, investigates security incidents, and supports ongoing security operations, awareness, and compliance initiatives.
What You Will be Doing:
Security Operations & Incident Response
Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email security platforms
Investigate and remediate phishing, malware, and security incidents
Maintain and improve secure email and web gateway controls
Provide Tier 2 security escalation support and incident resolution
Vulnerability & Endpoint Management
Review vulnerability scans and penetration test results
Coordinate remediation and patching with Systems Administrators
Participate in the organization’s vulnerability management program
Maintain awareness of emerging threats and vulnerabilities
Identity & Access Management
Support MFA and zero trust identity solutions
Assist with password management tools and access reviews
Perform quarterly terminated user audits and annual access reviews
Secure shared and privileged account credentials
Security Awareness & Training
Conduct quarterly phishing simulations
Deliver security awareness campaigns and new hire training
Educate employees on security best practices and emerging threats
Projects, Policies & Continuous Improvement
Participate in IT and cross functional security projects
Ensure compliance with organizational policies and standards
Recommend updates to security policies, procedures, and controls
Create and maintain security documentation and knowledge base content
Customer Focus
Deliver timely, professional, and customer focused security support to internal and external stakeholders
Communicate clearly and effectively regarding security issues, risks, and remediation steps
Partner with business units and customers to understand requirements and align security solutions accordingly
Maintain a service-oriented mindset while balancing security risk and operational needs
Communication & Reporting
Document security incidents, investigations, and remediation activities in accordance with organizational procedures
Prepare clear, accurate reports and summaries for IT leadership, management, auditors, and other stakeholders
Communicate security status, risks, and trends through regular reporting and adhoc briefings as needed
Maintain timely and professional communication during incidents, projects, and security initiatives
Teamwork:
Crosstrain with IT team members
Document systems and processes
Secure shared account credentials
Perform peer documentation reviews
What You Bring to Assure Success:
Experience with Secure Email Gateways, Secure Web Gateways, EDR, and SIEM tools
Experience with Security Awareness Training and Privileged Access technologies
Experience with Microsoft Defender
Hands on experience administering and monitoring Microsoft Defender XDR and related Microsoft security products to identify, investigate, and remediate security threats across endpoints, identities, email, and cloud workloads
Experience with vulnerability scanning Knowledge of CIS and NIST frameworks
Experience administering Microsoft and Cisco Systems
Understanding of networking fundamentals including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP
Ability to explain complex concepts in simple terms
CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA, or equivalent industry certifications preferred but not required
