IT - Cyber Security Analyst II

Description Of Essential Duties

• Adhere to and evaluate current security procedures and standards, suggesting improvements as needed.
• Monitor and respond to security alerts as outlined by company policies and procedures.
• Follow policies and procedures to ensure cyber risk is properly managed in accordance with the risk tolerance of the company.
• Guide, support, and educate other members of the team as they work towards the common goal of safeguarding company assets.
• Aid the company with risk analysis and risk mitigation efforts.
• Maintain a deep understanding of Information Technology and security architecture.
• Use security knowledge and tools to monitor for imminent and pervasive threats to company assets.
• Automate playbooks as needed to improve response time and efficiency.
• Provide status and metric reporting and adhere to internal operational security and policies; Document all actions taken in ticketing system.
• Complete task and project work as assigned.

Other Responsibilities/Requirements

• Develop and maintain a positive relationship with equipment vendors and company personnel.
• Provide management and team members detailed information concerning current technical issues.
• Continually improve the service by identifying and correcting issues or gaps in knowledge capital (analysis procedures, playbooks, network models), identifying and recommending new or updated tools, content, countermeasures, scripts, plug-ins and other “glue”.
• Perform peer reviews and consultations with other Cyber Security Analysts regarding potential security incidents.
• Serve as a Subject Matter Expert in at least one security-related area (e.g. reverse engineering malware, penetration testing, software testing, cryptography, etc.).
• Be available for 24/7 on-call rotation.
• Must have an understanding of the importance of learning and that it is never-ending.
• Must be a self-motivated individual, willing to constantly evaluate the environment for improvement.

Qualification, Education And Experience Requirements

• Bachelor of Science in Computer Science or Information Management combined with five years security or technology support experience required; Master’s degree may substitute for some work experience.
• Documented experience with the following technologies: leading SIEM technologies, IDS/IPS, network- and host-based firewalls, data leakage protection (DLP).
• Working experience with possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
• Working experience with Windows and Unix administration.
• Working experience with common penetration testing techniques.
• Working experience with basic networking protocols such as IP, DNS, HTTP, etc.
• Working experience with system security architecture and security solutions.

Preferred Certification

• Security+
• Certified Intrusion Analyst (GIAC)
• Continuous Monitoring (GMON)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)

Supervisory Responsibilities

None

Physical Demands/Work Environment

• Experience in a fast-paced support environment as a member of a 24x7x365 network and/or security operations team;
• Must be able to concentrate for long periods of time;
• Must be able to lift and carry 25 pounds on occasional basis.

EEO M/F/D/V AA