Security Analyst

Summary The Cybersecurity Analyst provides technical expertise and functional knowledge on IT systems and security applications. As a member of the team, the Cybersecurity Analyst is responsible for support of Information Security controls such as endpoint security remediation efforts, vulnerability assessments, intrusion prevention systems, security monitoring, incident response company-wide, and all other administrative functions as assigned.

Responsibilities

• Investigate and respond to possible threats to Information Systems by analyzing results produced by security monitoring and vulnerability assessment tools.
• Perform endpoint, application, and server malware remediation tasks including root cause analysis on security incidents.
• Support the management of security systems, projects, policies, practices and standards
• Assist with the evaluation of new security related technologies which may be used to replace, enhance or integration with IT systems
• Monitor and perform daily security incident alert remediations.
• Maintain professional skills, certifications, and competencies
• Ensure policies and procedures put in place are adhered to and take corrective action where non-conformities are identified.
• Assist with endpoint security risk and vulnerability assessments including remediation efforts.
• Work within a service desk ticket system to manage day to day activities.
• Research new and better ways of mitigating security risks using emerging technologies and solutions
• Technical skills range from security monitoring solutions to forensic analysis, knowledge of internet filtering, AD management, IPS/IDS, Anti-virus, and data loss protection technologies
• Work with the IT Management Team to proactively maintain the overall Cybersecurity Program
• Work with IT and business teams for project support activities
• Increase Information Security awareness within the corporation by assisting with training on information security.
• Assist with monthly security metric reports.
• Communicate timely status updates (both verbal and written) to team members and management
• Performs other security duties as assigned

Qualifications

• Two to four years’ experience with companies that have successfully used IT as a business lever in driving optimization and change.
• Demonstrate the importance of good decision making and strategic discipline through example.
• IT Security Certification and/or and prior experience in a global security and compliance team required.
• Understands security regulations and has prior work experience in a highly regulated industry.
• Bachelor’s degree in Math, Computer Science required
• Minimum of 3 years of IT experience required
• Understanding of attack vectors, current threats, and their remediation strategies
• Understanding of control frameworks and reference architectures such as NIST, Cyber Security kill chain.
• Understanding of TCP/IP (Transmission Control Protocol/Internet Protocol) networking and the OSI (Open Systems Interconnection) 7-layer model.
• Working knowledge of Windows operating systems and products, UNIX, Linux, and Cloud-based systems.
• Strong analytical, problem solving, and attention to detail capabilities
• Ability to help others in the organization with IT security knowledge at a level of understanding appropriate to their job function
• Excellent oral/written communications, organizational, teamwork, and interpersonal skills
• Ability to multi-task in a fast-paced environment
• Demonstrated outstanding level of professionalism, including ability to exercise good judgment, discretion, tact, and diplomacy
• Ability to work independently under consultative direction only
• May require infrequent periodic travel to local plant and facility locations
• Some travel may be required for the purpose of meeting with clients, stakeholders, or off-site personnel/management.
• Some off hours work may be required.
• On call rotation required.