Security Analyst III

About the role

This highly technical position directly participates in Global Security Operations activities including prevention, detection, and response to IT security incidents worldwide. The IT Security Operations Specialist will support a wide range of IT security activities including monitoring of alerts, investigation of alerts, incident response, vulnerability response, threat intelligence, and digital forensics. Individuals in this position will also have additional duties assisting with the implementation of IT security strategy and serving as a security advisor to ensure IT systems are implemented and maintained to the highest security standards.

Responsibilities

• Demonstrates high knowledge in multiple domains of IT Security and subject matter expertise in at least one domain such as incident response, vulnerability assessment, or threat intelligence
• Works under only general direction. Independently determines and develops approach to solutions. Provides technical solutions to a wide range of difficult problems
• Handles complex tasks such as security event analysis, vulnerability assessment, and reporting with no defined procedures in place
• Often sets directions and delivers results in own role which have a significant impact to the Global Security Operations organization or its stakeholders in areas such as incident response, vulnerability management, and threat intelligence through application of expertise and established process in these functions
• Provides guidance and training to less experienced professional or support staff. Demonstrates leadership capabilities. Assists in leading a project in the development and implementation of processes and programs
• Leverages knowledge of topics such as networking, operating systems, application architecture, cloud, log management, SIEM, SOAR, case management, and investigative techniques
• Serves as area specialist within one or several functions across Global Security Operations. Within these functions the individual recognizes and responds to stakeholder needs and ensures commitments are delivered upon
• Engages in frequent internal and cross-organizational contact. Works closely with external vendors. Represents organization in providing solutions to difficult technical issues associated with specific projects
• Operates common tools and systems for vulnerability assessment, penetration testing, network intrusion detection, intrusion prevention, network analysis, log management, SIEM, and SOAR. Applies subject matter knowledge to solve common needs such as verifying vulnerabilities, confirming security incidents, developing reports, and resolving system errors
• Proactively works to sustain operations through activities such as procurement and renewals for software and hardware support. Plan for systems licensing, lifecycle management, and capacity. Gathers quotes and request purchasing of software, services, and hardware as needed for projects. Participate in the IT Security planning and budgeting process
• Identifies better practice and creates improvements in methods, techniques, approaches, etc
• Participates in evaluation of new security tools, techniques, and technologies
• Applies knowledge of common enterprise IT architectures, platforms, and services such as client/server, SaaS, PaaS, and IaaS
• Applies knowledge of information security of common threats, vulnerabilities, and exposures applicable to IT systems

Requirements

A Bachelor’s degree in Computer Science, Information Systems, or Information Security is required; relevant experience may be substituted for degree when appropriate. Advanced degree preferred

A minimum of 6 years of progressively responsible relevant experience

Experience with using MS Defender for Incident Response

Ability to lead a project in the development and implementation of processes and technology

Strong attentional to detail is required

Experience with incident response and digital forensics required

Vendor neutral technical certifications (CISSP, CISM, GCIH) preferred

Vendor sponsored and professional certifications (Microsoft, AWS, etc.) desirable

Qualifications

• A Bachelor’s degree in Computer Science, Information Systems, or Information Security is required; relevant experience may be substituted for degree when appropriate. Advanced degree preferred
• A minimum of 6 years of progressively responsible relevant experience
• Experience with using MS Defender for Incident Response
• Ability to lead a project in the development and implementation of processes and technology
• Strong attentional to detail is required
• Experience with incident response and digital forensics required
• Vendor neutral technical certifications (CISSP, CISM, GCIH) preferred
• Vendor sponsored and professional certifications (Microsoft, AWS, etc.) desirable

Benefits

The base compensation range for this position is $99,600 to $184,200. Base compensation is determined based on a number of factors. This position is also eligible for a company bonus based on individual and company performance.

Pay

The base compensation range for this position is $99,600 to $184,200. Base compensation is determined based on a number of factors. This position is also eligible for a company bonus based on individual and company performance.

Schedule

Full time