IT Security Analyst

Founded in 1925 and a leader in the production of Stainless Steels, Nickel Alloys and Titanium Long products, Valbruna is a private company with 2,800 employees and an annual output of approx. 300,000 tons of specialty steels. Production is primarily focused on Stainless Steels and Specialty Alloys, available in blooms and billets, ingots, round, square, flat, hexagonal and angle bars, wire rod, wire, reinforcement bars and threaded rods, with the expressed goal of satisfying the most sophisticated needs of the customer. To that end, Valbruna is constantly updating its production capabilities and experience.

Key Responsibilities & Evaluation Focus:

• Review and analyze security alerts from SentinelOne, SIEM/SEM, and Netwrix
• Review network traffic, access logs, and failures (FortiGate, Cisco Umbrella)
• Triage and escalate security incidents appropriately
• Identify recurring patterns and potential control gaps
• Document investigations, findings, and remediation actions

30% — Security Monitoring, Traffic Review & Incident Triage

Objective: Monitor, analyze, and respond to security events and anomalous activity to reduce risk and support timely incident resolution.

25% — Vulnerability Management, Patching & Exposure Reduction

Objective: Identify, prioritize, and track vulnerabilities and patching outcomes to reduce organizational exposure.

Key Responsibilities & Evaluation Focus:

• Coordinate and review internal/external vulnerability scans (Nessus, Pentera, UpGuard, Cloudflare)
• Validate findings and reduce false positives
• Track vulnerability remediation and aging
• Support patch testing, deployment tracking, and compliance reporting
• Demonstrate risk-based prioritization of remediation efforts

20% — Endpoint Hardening, Baselines & Compliance

Objective: Maintain secure endpoint configurations through standardized baselines and compliance-driven controls.

Key Responsibilities & Evaluation Focus:

• Create and maintain secure endpoint baselines and golden images
• Reduce configuration drift and validate baseline compliance
• Maintain endpoint security agent health and coverage
• Produce audit-ready evidence aligned to CMMC requirements
• Document approved exceptions and compensating controls

10% — Identity, Access & Risk Support

Objective: Support secure access practices and organizational risk management activities.

Key Responsibilities & Evaluation Focus:

• Execute onboarding/offboarding and validate access
• Participate in periodic access reviews and remediation
• Support MFA and access control initiatives
• Participate in risk assessments and document findings
• Support software approval and intake processes

15% — Vendor Security, Metrics & Operational Support

Objective: Support third-party risk management, security visibility, and small-team operational needs.

Key Responsibilities & Evaluation Focus:

• Support vendor security questionnaires and artifact tracking
• Track remediation items and follow-ups
• Track and report security KPIs and metrics
• Maintain runbooks, SOPs, and documentation
• Provide helpdesk/desktop failback support when required