Information Security Analyst, I (FT Weekends, Remote)

About the role

The Information Security Analyst I supports day-to-day security operations, event/incident investigation, security control assessment, data analysis and reporting, and other infosec-related activities. They work with the Project team as well as Helpdesk Support team to mitigate risks and vulnerabilities and create documentation or reports regarding infosec activity and incidents.

Responsibilities

• Perform penetration testing; along with internal and external scanning, assess report and escalate to appropriate team and engineers.
• Resolve any computers with missing Hard Drive Encryption.
• Resolve and report out any violations of Office365 hardening security procedures; this includes but not limited to bypassing multi-factor authentication, device compliance policy, conditional access.
• Resolve any computers and servers with missing vulnerability patch and Windows and third-party updates.
• Responds to security incidents (Helpdesk Support), conducts forensic investigations and targets reviews of suspect areas as well as develop action plans to address root causes of security-related problems.
• Collaborates on projects to ensure that security issues are addressed throughout the project life cycle.
• Reports to Risk Manager concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Provides responsive support for problems found during normal working hours as well as outside normal working hours as needed.

Qualifications

• 1-2+ years of security experience working with Endpoint Security, Intrusion Prevention, and Firewall security.
• 2+ years of experience working for an MSP/MSSP or SOC (Security Operations Center).
• 2+ years of Incident Response experience.
• Proven work experience as a system security engineer or information security engineer.
• Experience in building and maintaining security systems.
• Detailed technical knowledge of database and operating system security.
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools.
• A thorough understanding of the latest security principles, techniques, and protocols.
• Problem solving skills and ability to work under pressure.

Skills

• Ethical Hacker - Preferred
• (ISC)² Associate of - Preferred
• CISSP (Certified Information Systems Security Professional) – Preferred
• CCNP Security – Preferred

Benefits

• Insurance Coverage: Health, Dental, Vision, Life/AD&D, Short-Term Disability, Long-Term Disability, Accident, Hospital Indemnity, Critical Illness
• Paid Time Off (Vacation, Holidays, Birthday)
• 401k Retirement Plan with Company Match
• Flexible Spending Account, Health Savings Account
• Pet Insurance
• Fun On and Off-Site Events
• Referral Bonus Program
• Employee Assistance Program