Security Analyst

Summary

The Cybersecurity Analyst provides technical expertise and functional knowledge on IT systems and security applications. As a member of the team, the Cybersecurity Analyst is responsible for support of Information Security controls such as endpoint security remediation efforts, vulnerability assessments, intrusion prevention systems, security monitoring, incident response company-wide, and all other administrative functions as assigned.

Responsibilities

Investigate and respond to possible threats to Information Systems by analyzing results produced by security monitoring and vulnerability assessment tools.

Perform endpoint, application, and server malware remediation tasks including root cause analysis on security incidents.

Support the management of security systems, projects, policies, practices and standards

Assist with the evaluation of new security related technologies which may be used to replace, enhance or integration with IT systems

Monitor and perform daily security incident alert remediations.

Maintain professional skills, certifications, and competencies

Ensure policies and procedures put in place are adhered to and take corrective action where non-conformities are identified.

Assist with endpoint security risk and vulnerability assessments including remediation efforts.

Work within a service desk ticket system to manage day to day activities.

Research new and better ways of mitigating security risks using emerging technologies and solutions

Technical skills range from security monitoring solutions to forensic analysis, knowledge of internet filtering, AD management, IPS/IDS, Anti-virus, and data loss protection technologies

Work with the IT Management Team to proactively maintain the overall Cybersecurity Program

Work with IT and business teams for project support activities

Increase Information Security awareness within the corporation by assisting with training on information security.

Assist with monthly security metric reports.

Communicate timely status updates (both verbal and written) to team members and management

Performs other security duties as assigned Qualifications

Two to four years’ experience with companies that have successfully used IT as a business lever in driving optimization and change.

Demonstrate the importance of good decision making and strategic discipline through example.

IT Security Certification and/or and prior experience in a global security and compliance team required.

Understands security regulations and has prior work experience in a highly regulated industry.

Bachelor’s degree in Math, Computer Science required

Minimum of 3 years of IT experience required

Understanding of attack vectors, current threats, and their remediation strategies

Understanding of control frameworks and reference architectures such as NIST, Cyber Security kill chain.

Understanding of TCP/IP (Transmission Control Protocol/Internet Protocol) networking and the OSI (Open Systems Interconnection) 7-layer model.

Working knowledge of Windows operating systems and products, UNIX, Linux, and Cloud-based systems.

Strong analytical, problem solving, and attention to detail capabilities

Ability to help others in the organization with IT security knowledge at a level of understanding appropriate to their job function

Excellent oral/written communications, organizational, teamwork, and interpersonal skills

Ability to multi-task in a fast-paced environment

Demonstrated outstanding level of professionalism, including ability to exercise good judgment, discretion, tact, and diplomacy

Ability to work independently under consultative direction only

May require infrequent periodic travel to local plant and facility locations

Some travel may be required for the purpose of meeting with clients, stakeholders, or off-site personnel/management.

Some off hours work may be required.

On call rotation required.

#LI-Remote