IT Security Analyst

About the role

Swagelok is a global organization and one of the largest employers of manufacturing talent in Northeast Ohio. We are driven by our core values of Quality, Integrity, Respect for the Individual, Customer Focus, Innovation, and Continuous Improvement, which are demonstrated through our daily actions. For over 75 years, our dedication to our core values has been the foundation for our success. Our products have been up into space, down to the bottom of the ocean, and everywhere in between. That same dedication spans to our customers. Throughout our organization we demonstrate a commitment to these values and those we bring onboard. Whether you want to grow in your role or explore broad opportunities and develop new skills—you'll thrive in a culture that promotes learning and development. We strive to be a company where we all can do our best work with a true sense of purpose and belonging.

The IT Security Analyst is responsible for the coordination of information security efforts and initiatives across the organization that ensure the availability, integrity, and confidentiality of Swagelok information systems resources. Assists in security risk assessment efforts, incident response, information security technology selection. Provides engineering design, analysis, and support for routers, firewalls, networks, and operating systems to accomplish the IT security function's objectives.

Responsibilities

• Lead research, design, and implementation of cyber security solutions for organization systems and products that comply with all applicable security policies and standards
• Manage collaboration with IT and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software
• Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, host-based security tools, etc. Correlates network activity across networks to identify trends of unauthorized use
• Analyzes and makes recommendations to improve network, system, and application architectures
• Examines network, server, and application logs to determine trends and identify security incidents
• Lead the review and update of cyber security policies, architectures, and standards
• Lead efforts responding to audits, penetration tests and vulnerability assessments

Education and Experience Requirements

Required:

• BS or MA in computer science, cybersecurity, or a related field
• 7+ years of experience in cybersecurity, especially in a security engineering role

Desired, but not required:

• Certified information systems security professional (CISSP)

Skills

• Familiarity with Microsoft O365 Security and Compliance Center, including recommending, creating, and maintaining security and compliance policies with the Azure Security Center
• 3+ years of experience related to managing firewall solutions in an enterprise environment
• Broad understanding of Microsoft Active Directory
• Experience managing Microsoft Azure, O365, or Amazon cloud services
• Strong understanding of security architecture, tool integration and automation
• Understanding of common SOC and SOAR processes and workflows

Working conditions and/or Physical Requirements

• Working conditions associated with normal office environment
• Ability to operate standard office equipment (e.g., computer, telephone, copier, printer, etc.)
• Ability to effectively communicate in both small and large groups and settings
• Ability to traverse between multiple locations in Ohio and Pennsylvania as needed
• Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state, and local standards, including meeting qualitative and quantitative productivity standards
• Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state, and local standards