Analyst, Cyber Security

As a Cyber Security Analyst, you will be integral in safeguarding our information systems, ensuring the security of sensitive data, and maintaining its confidentiality, integrity, and availability. Collaborating closely with the IS Team, your role involves identifying and addressing security vulnerabilities, responding to security incidents, and fortifying our overall security stance.

What You’ll Do:

Security Monitoring and Incident Response:

• Collaborate on monitoring network traffic and security alerts to detect potential threats.
• Investigate and promptly respond to security incidents, breaches, and vulnerabilities.
• Implement effective incident response procedures to minimize damage and recovery time.

Vulnerability Assessment:

• Perform regular vulnerability assessments and penetration testing using vendor or third-party tools.
• Evaluate security controls and propose enhancements to mitigate risks effectively.

Security Policies and Procedures:

• Contribute to developing security policies and procedures in adherence to industry standards and regulations.
• Educate staff on security best practices and maintain ongoing security awareness programs.

Security Solutions Management:

• Collaborate on managing and configuring security tools like firewalls, intrusion detection systems, and antivirus software.
• Ensure proper functioning and configuration of systems, staying updated on the latest security threats and technologies.

Security Audits and Compliance:

• Assist in preparations and participation in security audits to ensure compliance.
• Ensure adherence to data protection laws, HIPAA, state or local regulations, and internal policies.

Incident Documentation and Reporting:

• Maintain comprehensive records of security incidents and actions taken.
• Prepare management reports on security incidents, risks, and compliance status.

Security Awareness:

• Stay informed about emerging threats and trends while supporting employee training on security best practices.
• Foster a security-conscious culture within the organization.

What You’ll Bring (Hiring Requirements):

• Bachelor’s degree in computer science, Information Technology, or related field (or equivalent work experience).
• Preferred but not required certifications: CompTIA Security +, Certified Ethical Hacker (CEH), System Security Certified Practitioner (SSCP).
• 2-4 years of cyber security experience.
• Understanding of HIPAA and PCI DSS regulations.
• Strong knowledge of security technologies, protocols, and best practices.
• Proficiency in security tools and software.
• Excellent problem-solving and critical-thinking skills.
• Strong written and verbal communication skills.
• Ability to work well independently and in a team.
• Detail-oriented with a commitment to top-notch security standards.
• Proactive and able to work under pressure, occasionally requiring after-hour and weekend availability.
• Comfortable in a fast-paced, customer-focused, start-up culture environment with evolving processes, adaptable to changing business demands.