Principal Security Operations Analyst

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title. Must not include Job ID etc. Must preserve all substantive info. Remove boilerplate like EEO, fraud warnings, etc. Also remove duplicated lines. We need to parse the posting. Content: - Intro paragraph about Ascensus: "Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow." This is about the company, could be "About the role"? Actually "About the role" is typical heading for position summary. The posting has "Section 1: Position Summary". So we can put that under

About the role

with paragraph. - Section 2: Job Functions, Essential Duties and Responsibilities: many bullet-like sentences. We'll put under

Responsibilities

with

• items. - Section 3: Experience, Skills, Knowledge Requirements: includes experience managing security tools, monitoring, detecting, responding, knowledge of info security risks, ability to lead, inspire, motivate, ability to objectively review team's work, implement enhancements, monitor quality, strong written and oral communication, ability to communicate effectively, highly organized, able to process and manage inventories of controls and findings, excellent analytical and problem resolution skills, self-starter, able to work independently, persistence and strength to champion initiatives. Minimum Requirements: 5 years experience in InfoSec or SecOps, knowledge of networking preferred, expert level proficiency in MS Office (Word, Excel, PowerPoint), Bachelor's degree plus equivalent work experience required, CISSP certification preferred. We need to decide which headings to use: Experience, Skills, Knowledge Requirements could map to Requirements, Qualifications, Skills. The instructions: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can split into Requirements (minimum years, degree, certifications), Qualifications (maybe preferred qualifications like networking knowledge, CISSP), Skills (technical and soft skills). Or we could combine. But we must not create empty sections. We need to include only sections with real specific content. We have content for: - About the role (position summary) - Responsibilities (job functions) - Requirements (minimum requirements: 5 years experience, Bachelor's degree, etc.) - Qualifications (preferred: networking knowledge, CISSP certification) - Skills (list of skills: managing security tools, monitoring, detecting, responding, knowledge of info security risks, ability to lead, inspire, motivate, ability to objectively review team's work, implement enhancements, monitor quality, strong written and oral communication, ability to communicate effectively, highly organized, able to process and manage inventories of controls and findings, excellent analytical and problem resolution skills, self-starter, able to work independently, persistence and strength to champion initiatives) We have no explicit Benefits, Pay, Schedule info. So we omit those sections. We must not include boilerplate like EEO, fraud warnings. Remove those lines. We must preserve all substantive information. Ensure we don't lose any details. Let's extract details precisely. From Section 1: "The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus." That's the position summary. Also preceding paragraph about Ascensus. Should we include that as part of About the role? Probably yes. Thus About the role: combine Ascensus description and position summary. Now Responsibilities: list each duty. Let's extract bullet points from Section 2: - Accountability for team’s effectiveness and success - Establish cross-training within team for availability of SecOps functions - Security Event Monitoring & Response - Monitor security events from all tool sources - Analyze events filtering for false positives - Understanding of basic network services, vulnerabilities and attacks - Incident response process and escalation of events - Work with the security team to enhance and build new processes & procedures - Contribute to and maintain documented processes around monitoring & response - Work closely with information security, IT, risk & governance, and facilities teams. - Report on security operations metrics quarterly - Process phishing email escalations from Associates - Correlate events with other known social engineering attempts - Management of Security Solutions - Build, manage and maintain tools including, but not limited to: IAM, IPS, SEIM, Web Application Firewall, Anti-Virus, Malware and Endpoint Protection, CASB, UBA, DLP, Web Proxy/Web content filtering, Vulnerability management, File integrity monitoring, Network Access Control (NAC) - Maintain documentation around tools - Champion the information security tool’s usage to maximize features - Review access requests around content filtering, removable media and exceptions - Work collaboratively with the various technology teams to accomplish security objectives - Additional security experience may be gained depending on associate’s level of interest and availability: - Assessing and selecting security vendors or solutions - Identify emerging vulnerabilities and evaluate associated risks - Assisting in corporate incident response events - Security testing (vulnerability scans, aspects of ethical hacking/penetration testing) - Detailed configuration reviews - Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients. - Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture. - Assist with other tasks and projects as assigned We need to preserve all substantive info. Some of these are sentences that could be list items. We'll break them into
• items. Now Requirements (minimum): "Minimum Requirements: A minimum of 5 years’ experience in Information Security or Security Operations Knowledge of networking preferred. Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point Bachelor’s degree plus equivalent work experience required. CISSP certification preferred." We need to separate required vs preferred? The instruction says we can have Requirements and Qualifications sections. We'll put mandatory requirements in Requirements: 5 years experience, Bachelor's degree plus equivalent work experience. Possibly also "Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point" could be a requirement (maybe required). It says "Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point" under Minimum Requirements? Actually it's in the same sentence after "Knowledge of networking preferred." The line: "Minimum Requirements: A minimum of 5 years’ experience in Information Security or Security OperationsKnowledge of networking preferred. Expert level proficiency in MS Office software applications, specifically Word, Excel and Power PointBachelor’s degree plus equivalent work experience required. CISSP certification preferred." It seems missing spaces. We'll interpret: Minimum Requirements: 5 years experience in InfoSec or SecOps; Knowledge of networking preferred; Expert level proficiency in MS Office (Word, Excel, PowerPoint); Bachelor's degree plus equivalent work experience required; CISSP certification preferred. Thus required: 5 years experience, Bachelor's degree plus equivalent work experience, Expert level proficiency in MS Office (maybe required). Preferred: Knowledge of networking, CISSP certification. We'll put Requirements: 5 years experience, Bachelor's degree plus equivalent work experience, Expert level proficiency in MS Office (Word, Excel, PowerPoint). Qualifications: Knowledge of networking preferred, CISSP certification preferred. Now Skills: list of skills from Experience, Skills, Knowledge Requirements: "Experience managing security tools noted aboveExperience with monitoring, detecting, and responding activities Knowledge of information security risks, at least technical aspects including working knowledge around remediation. Ability to lead, inspire and motivate associates on the teamAbility to objectively review the team’s work, implement enhancements and monitor qualityStrong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus. Highly organized and able to process and manage inventories of controls and findings. Excellent analytical and problem resolution skills. Self-starter and able to work independently. Persistence and strength to champion initiatives." We need to split into sensible items. Let's list: - Experience managing security tools (as noted above) - Experience with monitoring, detecting, and responding activities - Knowledge of information security risks (technical aspects) and working knowledge around remediation - Ability to lead, inspire and motivate associates on the team - Ability to objectively review the team’s work, implement enhancements and monitor quality - Strong written and oral communication skills - Ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus - Highly organized and able to process and manage inventories of controls and findings - Excellent analytical and problem resolution skills - Self-starter and able to work independently - Persistence and strength to champion initiatives Now we need to output HTML fragment with

  headings and

  • for lists,

    for prose. We must not include any extra text outside HTML. Let's craft. First, About the role: combine Ascensus description and position summary. Paragraph: "Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow. The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus." Now Responsibilities: list items. We need to ensure we capture all responsibilities without losing nuance. Let's create list items: - Accountability for team’s effectiveness and success - Establish cross-training within team for availability of SecOps functions - Monitor security events from all tool sources - Analyze events, filtering for false positives - Understanding of basic network services, vulnerabilities and attacks - Manage incident response process and escalation of events - Work with the security team to enhance and build new processes & procedures - Contribute to and maintain documented processes around monitoring & response - Work closely with information security, IT, risk & governance, and facilities teams - Report on security operations metrics quarterly - Process phishing email escalations from Associates - Correlate events with other known social engineering attempts - Build, manage and maintain security tools including IAM, IPS, SEIM, Web Application Firewall, Anti-Virus, Malware and Endpoint Protection, CASB, UBA, DLP, Web Proxy/Web content filtering, Vulnerability management, File integrity monitoring, Network Access Control (NAC) - Maintain documentation around tools - Champion the information security tool’s usage to maximize features - Review access requests around content filtering, removable media and exceptions - Work collaboratively with various technology teams to accomplish security objectives - Assess and select security vendors or solutions (based on interest/availability) - Identify emerging vulnerabilities and evaluate associated risks - Assist in corporate incident response events - Conduct security testing (vulnerability scans, aspects of ethical hacking/penetration testing) - Perform detailed configuration reviews - Protect, secure, and properly handle all confidential data held by Ascensus to prevent unauthorized access, improper transmission, or unapproved disclosure - Demonstrate I-Client service philosophy and Core Values of People Matter, Quality First and Integrity Always® in daily actions - Assist with other tasks and projects as assigned Now Requirements: list items. - Minimum of 5 years’ experience in Information Security or Security Operations - Bachelor’s degree plus equivalent work experience - Expert level proficiency in MS Office software applications (Word, Excel, PowerPoint) Qualifications: - Knowledge of networking (preferred) - CISSP certification (preferred) Skills: - Experience managing security tools (as noted above) - Experience with monitoring, detecting, and responding activities - Knowledge of information security risks (technical aspects) and working knowledge around remediation - Ability to lead, inspire and motivate associates on the team - Ability to objectively review the team’s work, implement enhancements and monitor quality -