Senior IT Security Analyst – California Academy of Sciences

About the role

The Senior Security Analyst reports to the Director of Information Technology. This role is responsible for configuring, maintaining, and monitoring internal security controls to prevent, detect, and respond to cyber threats. The Analyst will also contribute to improving the security architecture and assessing/improving security in various departments.

Responsibilities

• Manage, coordinate, and implement the latest security best practices on network devices, firewalls, servers, and workstations.
• Partner with the IT Infrastructure Manager to establish and maintain a system for ensuring security policies are met and all staff are trained and informed fully on their role in security.
• Evaluate the effectiveness of awareness and security training programs and make recommendations for improvement.
• Analyze, research, and resolve security breaches and vulnerability issues for all implemented software and hardware platforms.
• Evaluate, prioritize, and coordinate patching.
• Provide security expertise and consulting to the IT Team and CAS internal technology partners.
• Participate in team exercises to identify potential security risks and tabletop scenarios.
• Maintain awareness/knowledge of industry-standard security trends/benchmarks/frameworks (e.g., NIST/CISA/ISO 27001).
• Perform off-hour/weekend work as required.

Qualifications

• 5+ years of experience in the Information Technology field
• 3+ years of enterprise IT security experience
• Experience with the administration/use of security software (e.g., Trellix/FireEye, Tenable, Nessus, Sophos, Splunk)
• Experience Assessing IT Infrastructure And Software To Identify Vulnerabilities
• BS/BA or equivalent training and experience in Information Security
• Information Security Certifications – CISSP, CISM, GIAC – strongly preferred
• SIEM Experience – Preferred
• Hands-on experience with firewalls, network security, and VPNs – preferred
• Automation Experience – Preferred

Skills and Abilities

• Strong problem-solving and troubleshooting skills
• Ability to interact with users of varying levels of technical knowledge
• Ability to work as part of a team or collaborate well with team members and external collaborators to accomplish mutual goals
• Ability to work efficiently and communicate with staff, cross-functional teams, and external customers from different identities and experiences
• Advanced knowledge of the processes, tools, and techniques of information security management, ability to deploy and monitor information security systems, as well as detect, resolve, and prevent violations of IT security, to protect organizational data

Physical Environment

To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

Compensation and Benefits

• The salary for this position is $121,762.00. Actual compensation will be commensurate with the final candidate’s qualifications and experience, including skills, knowledge, relevant education, certifications and aligned with the internal peer group.
• The Academy offers a total compensation package that emphasizes both base salary and comprehensive benefits based on the hours per week worked.

Schedule

This position is full-time, 40 hours per week, Hybrid 3 days onsite.