Analyst, Cyber Security II

Duties

• Performs daily monitoring and review of security events.
• Keeps up with the cyber threat landscape to rapidly identify potential threats and work with senior staff to ensure proper tuning of security tools.
• Performs daily monitoring and review of security events in a corporate setting.
• Performs investigations as needed and responds to potential incidents rapidly and accurately.
• Plans and performs security assessments such as penetration testing or vulnerability scanning.
• Anticipates and mitigates potential attacks through enterprise connections to ensure the security of the system(s).
• Exploits weaknesses detected in systems to assess and prevent potential break-ins.
• Analyzes business impact and exposure based on security threats, vulnerabilities, and risks.
• Develops and implements enterprise information security architectures and solutions.
• Researches, designs, and advocates new technologies, infrastructure, architectures, and security products that support security requirements for the enterprise and its customers, business partners, and vendors.
• Identifies, plans, and implements security tools.
• Evaluates and recommends procedures and processes for the prevention, detection, containment, and correction of information security breaches.
• Analyzes business impact and exposure based on security threats, vulnerabilities, and risks.
• Advises management and users regarding security procedures.
• Maintains awareness of security agencies and services to stay informed about current security threats and concerns.
• Evaluates products and/or procedures to enhance productivity and effectiveness of information security across the organization.

Skills

• Strong analytical, data gathering, and problem-solving skills with experience analyzing network attacks.
• Understanding of system and network security, incident management, intrusion detection, log analysis, and related technologies.
• Creativity to recognize and address new threats and security challenges as they arise.
• Knowledge of enterprise data architecture, systems engineering, and data communications as applied to the automated storage and retrieval of information, using multiple platforms and protocols with the inherent security risks of each.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Comprehensive understanding of the organization's goals and objectives.
• Expertise with threat analysis, risk management, configuration management, business continuity, and contingency planning.
• Advanced knowledge of administrative, procedural, and technical controls used to reduce security risks.
• Ability to troubleshoot multi-vendor security issues.
• Strong organizational, interpersonal, and oral communication skills.
• Advanced proficiency in network troubleshooting, diagnostic root cause analysis.
• Excellent analytical and problem-solving abilities.
• Strong proficiency with applicable IT Security tools (software and hardware).
• Microsoft Office.

About the Role

The Cyber Security Operations team is composed of twelve people across two teams, "Incident Triage, Analysis and Response" and "Security Engineering and Administration". This position would be performing real-time alert monitoring and triage in a fast-paced, multi-platformed environment which may require action and response 24X7 to support the technical business needs of the customer.