Cyber Security Analyst
Holland & Hart LLP · Salt Lake City, UT · 3 wk ago
HybridFull-time
We need to output HTML fragment with sections: About the role? The posting includes "General Purpose:" which is like about the role. Use for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to include sections only when posting has real specific content. We have:
- General Purpose: description -> About the role.
- Essential Duties/Responsibilities: list -> Responsibilities.
- Competencies: list of competencies -> could be Skills? Might map to Skills.
- Job Qualifications (Education, Experience and Certification): list -> Qualifications.
- Physical Requirements: maybe not needed? Not a standard heading; we could omit or include under Requirements? The instruction: Use headings for those specific sections; we can omit if not matching. Physical Requirements could be part of Requirements? But we have a Requirements heading separate from Qualifications. The instruction says use headings for those sections; we can decide to include Requirements for things like physical requirements, maybe also for "Job Qualifications"? Actually they separate Qualifications and Requirements. Usually Requirements = experience, skills, etc. Qualifications = education, certifications. But we can map as we see fit.
We have:
- Competencies: communication, customer/client experience, organization & planning, team player. Those are soft skills; could go under Skills.
- Job Qualifications: education, experience, certification, specific experiences, etc. That's Qualifications.
- Physical Requirements: could be under Requirements? Or we could create a Requirements section for physical requirements and maybe other non-qualification requirements (like ability to sit, etc). But the instruction: "Use
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to include sections only when posting has real specific content. We have:
- General Purpose: description -> About the role.
- Essential Duties/Responsibilities: list -> Responsibilities.
- Competencies: list of competencies -> could be Skills? Might map to Skills.
- Job Qualifications (Education, Experience and Certification): list -> Qualifications.
- Physical Requirements: maybe not needed? Not a standard heading; we could omit or include under Requirements? The instruction: Use headings for those specific sections; we can omit if not matching. Physical Requirements could be part of Requirements? But we have a Requirements heading separate from Qualifications. The instruction says use headings for those sections; we can decide to include Requirements for things like physical requirements, maybe also for "Job Qualifications"? Actually they separate Qualifications and Requirements. Usually Requirements = experience, skills, etc. Qualifications = education, certifications. But we can map as we see fit.
We have:
- Competencies: communication, customer/client experience, organization & planning, team player. Those are soft skills; could go under Skills.
- Job Qualifications: education, experience, certification, specific experiences, etc. That's Qualifications.
- Physical Requirements: could be under Requirements? Or we could create a Requirements section for physical requirements and maybe other non-qualification requirements (like ability to sit, etc). But the instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can include Requirements if we have content. We have physical requirements and maybe also "Must be collaborative, creative, and driven..." etc which are more competencies. But we already have Competencies.
We need to avoid filler like "commensurate with experience". Not present.
We need to include Pay and Schedule sections only if posting states them. Yes we have Schedule and Compensation (Pay). So include Pay and Schedule.
Benefits: yes we have Benefits section.
Thus we will have sections: About the role, Responsibilities, Skills (from Competencies), Qualifications, Requirements (maybe physical requirements), Benefits, Pay, Schedule.
We need to use - for any list of duties/requirements/benefits, and
for prose.
We need to preserve all substantive information; do not invent or summarize away detail. Must not repeat job title as heading. Do not put Job ID/requisition numbers as headings (none present). Remove boilerplate etc.
We need to output only HTML fragment.
Let's extract content.
General Purpose paragraph:
"General Purpose:The Cyber Security Analyst will report to the Information Security Manager and has responsibility for assisting with risk assessments, enterprise vulnerability assessments, operating security software, evaluating third party risk, and designing controls for AI systems Utilizes and analyzes metrics to produce recommendations for future controls and improvements. Responds to alerts, contains cyber security incidents, and routinely interfaces with personnel throughout H&H. This position requires advanced knowledge of information technology verticals across the enterprise, the ability to quickly ascertain the associated security controls, and the ability to positively influence others to implement the controls."
We need to keep that as prose in
. Possibly split sentences but keep as one paragraph.
Responsibilities: Essential Duties/Responsibilities list. It's a long paragraph with many sentences separated by periods. We need to turn into
- items. Each duty likely separated by periods. We need to preserve all substantive information; we can split at each sentence that starts with a capital letter after a period. But we must be careful not to lose details.
Let's list duties from the text:
"Identify and document security and privacy risk. Using knowledge of best practice, will identify methods to control the risk and assist with control implementation.Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats. May interface with vendors to budget and plan for future security controls.Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines.May install and administer security protection devices including end point protection (EPP) and SIEM technology.Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools.Utilize malware analysis and sandboxing tools to analyze suspicious events.Leverage security tools to analyze suspicious links, email and documents.Implement remediation controls to block suspicious email and other threats.May evaluate and analyze events using Security Event and Incident Management (SEIM) tools. Will develop reporting from SEIM and other devices.Assists in developing and implementing Security Awareness and Phishing Awareness campaigns. Through analysis of campaign data, will recommend addition controls to improve security.Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics.Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems.Inform others within IT Security and IT Management regarding security issues.Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks.Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements. Will integrate threat intelligence sources with vulnerability management processes.May conduct third party risk assessments and audits through application of established criteria.May evaluate and propose controls for AI systems.Identify methods to document and track third-party risk and get third party commitment to implement risk controls.May conduct privacy impact assessments of third parties using established processes.Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained.Maintains vulnerability management program and scanning engines.Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques.Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations.Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure.Provides evaluation of suspected malware and provides recommendations of remediation.Provides recommendations on physical security risks and controls.Supports and provides recommendations for access controls for applications, systems, and networks."
We need to split into list items. Each sentence ends with a period. Some sentences have no space after period before next capital (e.g., "...implementation.Interface"). We'll need to handle that.
Let's manually split:
1. Identify and document security and privacy risk.
2. Using knowledge of best practice, will identify methods to control the risk and assist with control implementation.
3. Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats.
4. May interface with vendors to budget and plan for future security controls.
5. Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines.
6. May install and administer security protection devices including end point protection (EPP) and SIEM technology.
7. Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools.
8. Utilize malware analysis and sandboxing tools to analyze suspicious events.
9. Leverage security tools to analyze suspicious links, email and documents.
10. Implement remediation controls to block suspicious email and other threats.
11. May evaluate and analyze events using Security Event and Incident Management (SEIM) tools.
12. Will develop reporting from SEIM and other devices.
13. Assists in developing and implementing Security Awareness and Phishing Awareness campaigns.
14. Through analysis of campaign data, will recommend addition controls to improve security.
15. Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics.
16. Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems.
17. Inform others within IT Security and IT Management regarding security issues.
18. Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks.
19. Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements.
20. Will integrate threat intelligence sources with vulnerability management processes.
21. May conduct third party risk assessments and audits through application of established criteria.
22. May evaluate and propose controls for AI systems.
23. Identify methods to document and track third-party risk and get third party commitment to implement risk controls.
24. May conduct privacy impact assessments of third parties using established processes.
25. Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained.
26. Maintains vulnerability management program and scanning engines.
27. Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques.
28. Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations.
29. Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure.
30. Provides evaluation of suspected malware and provides recommendations of remediation.
31. Provides recommendations on physical security risks and controls.
32. Supports and provides recommendations for access controls for applications, systems, and networks.
That seems comprehensive.
Now Competencies (Skills):
"Competencies:Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive.Team Player: Works within team and cross-functionally to meet required results."
We need to turn into list items under Skills. Each competency separated by period? Actually after each competency there is a period? Let's see: "Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive.Team Player: Works within team and cross-functionally to meet required results."
There is no period after communications before next competency; it's directly "Customer/Client Experience:" after a period? Actually there is a period after communications? The text: "Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience:" There's a period after communications? It says "communications.Customer". So there is a period before "Customer". So we can split at periods.
Thus items:
- Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.
- Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.
- Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive.
- Team Player: Works within team and cross-functionally to meet required results.
Now Job Qualifications (Education, Experience and Certification):
"Job Qualifications (Education, Experience and Certification):Bachelor’s degree in information technology, information systems, computer science or computer engineering.Three (3) years of cyber security experience.Minimum of one security technical certification such as SSCP, GSEC, CEH and Security+.Must have direct experience in the following:Vulnerability management and how to manage risk using the MITRE Attack Framework including threat intelligence sources.Maintaining and performing analysis using Security Event and Incident Management (SEIM) systems.Digital forensics, reverse malware analysis and incident response.Analyzing events using EDR/XDR and anti-malware systems.Per
- for any list of duties/requirements/benefits, and
for prose. We need to preserve all substantive information; do not invent or summarize away detail. Must not repeat job title as heading. Do not put Job ID/requisition numbers as headings (none present). Remove boilerplate etc. We need to output only HTML fragment. Let's extract content. General Purpose paragraph: "General Purpose:The Cyber Security Analyst will report to the Information Security Manager and has responsibility for assisting with risk assessments, enterprise vulnerability assessments, operating security software, evaluating third party risk, and designing controls for AI systems Utilizes and analyzes metrics to produce recommendations for future controls and improvements. Responds to alerts, contains cyber security incidents, and routinely interfaces with personnel throughout H&H. This position requires advanced knowledge of information technology verticals across the enterprise, the ability to quickly ascertain the associated security controls, and the ability to positively influence others to implement the controls." We need to keep that as prose in
. Possibly split sentences but keep as one paragraph. Responsibilities: Essential Duties/Responsibilities list. It's a long paragraph with many sentences separated by periods. We need to turn into
- items. Each duty likely separated by periods. We need to preserve all substantive information; we can split at each sentence that starts with a capital letter after a period. But we must be careful not to lose details. Let's list duties from the text: "Identify and document security and privacy risk. Using knowledge of best practice, will identify methods to control the risk and assist with control implementation.Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats. May interface with vendors to budget and plan for future security controls.Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines.May install and administer security protection devices including end point protection (EPP) and SIEM technology.Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools.Utilize malware analysis and sandboxing tools to analyze suspicious events.Leverage security tools to analyze suspicious links, email and documents.Implement remediation controls to block suspicious email and other threats.May evaluate and analyze events using Security Event and Incident Management (SEIM) tools. Will develop reporting from SEIM and other devices.Assists in developing and implementing Security Awareness and Phishing Awareness campaigns. Through analysis of campaign data, will recommend addition controls to improve security.Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics.Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems.Inform others within IT Security and IT Management regarding security issues.Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks.Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements. Will integrate threat intelligence sources with vulnerability management processes.May conduct third party risk assessments and audits through application of established criteria.May evaluate and propose controls for AI systems.Identify methods to document and track third-party risk and get third party commitment to implement risk controls.May conduct privacy impact assessments of third parties using established processes.Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained.Maintains vulnerability management program and scanning engines.Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques.Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations.Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure.Provides evaluation of suspected malware and provides recommendations of remediation.Provides recommendations on physical security risks and controls.Supports and provides recommendations for access controls for applications, systems, and networks." We need to split into list items. Each sentence ends with a period. Some sentences have no space after period before next capital (e.g., "...implementation.Interface"). We'll need to handle that. Let's manually split: 1. Identify and document security and privacy risk. 2. Using knowledge of best practice, will identify methods to control the risk and assist with control implementation. 3. Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats. 4. May interface with vendors to budget and plan for future security controls. 5. Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines. 6. May install and administer security protection devices including end point protection (EPP) and SIEM technology. 7. Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools. 8. Utilize malware analysis and sandboxing tools to analyze suspicious events. 9. Leverage security tools to analyze suspicious links, email and documents. 10. Implement remediation controls to block suspicious email and other threats. 11. May evaluate and analyze events using Security Event and Incident Management (SEIM) tools. 12. Will develop reporting from SEIM and other devices. 13. Assists in developing and implementing Security Awareness and Phishing Awareness campaigns. 14. Through analysis of campaign data, will recommend addition controls to improve security. 15. Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics. 16. Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems. 17. Inform others within IT Security and IT Management regarding security issues. 18. Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks. 19. Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements. 20. Will integrate threat intelligence sources with vulnerability management processes. 21. May conduct third party risk assessments and audits through application of established criteria. 22. May evaluate and propose controls for AI systems. 23. Identify methods to document and track third-party risk and get third party commitment to implement risk controls. 24. May conduct privacy impact assessments of third parties using established processes. 25. Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained. 26. Maintains vulnerability management program and scanning engines. 27. Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques. 28. Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations. 29. Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure. 30. Provides evaluation of suspected malware and provides recommendations of remediation. 31. Provides recommendations on physical security risks and controls. 32. Supports and provides recommendations for access controls for applications, systems, and networks. That seems comprehensive. Now Competencies (Skills): "Competencies:Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive.Team Player: Works within team and cross-functionally to meet required results." We need to turn into list items under Skills. Each competency separated by period? Actually after each competency there is a period? Let's see: "Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive.Team Player: Works within team and cross-functionally to meet required results." There is no period after communications before next competency; it's directly "Customer/Client Experience:" after a period? Actually there is a period after communications? The text: "Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications.Customer/Client Experience:" There's a period after communications? It says "communications.Customer". So there is a period before "Customer". So we can split at periods. Thus items: - Communication: Understands the importance of and demonstrates verbal, written, and non-verbal communications. - Customer/Client Experience: Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm. - Organization & Planning: Proactively takes actions, finds solutions, and displays skills to be efficient and productive. - Team Player: Works within team and cross-functionally to meet required results. Now Job Qualifications (Education, Experience and Certification): "Job Qualifications (Education, Experience and Certification):Bachelor’s degree in information technology, information systems, computer science or computer engineering.Three (3) years of cyber security experience.Minimum of one security technical certification such as SSCP, GSEC, CEH and Security+.Must have direct experience in the following:Vulnerability management and how to manage risk using the MITRE Attack Framework including threat intelligence sources.Maintaining and performing analysis using Security Event and Incident Management (SEIM) systems.Digital forensics, reverse malware analysis and incident response.Analyzing events using EDR/XDR and anti-malware systems.Per