Sr Analyst, Information Security

Job Summary:
The primary purpose of this role is to support the design, implementation and ongoing operations of information security tools and services. This includes translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to help design and implement remediation solutions.

To be successful, the individual in this role must have knowledge of security practices and tools related to identity and access management along with enterprise digital certificate management systems. This role helps establish and maintain programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices.

Key Responsibilities

• Experience with upgrading/installing firewalls and network devices
• Hands-on management and configuration of physical and cloud firewalls (Palo Alto, Fortinet)
• Evaluates entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities
• Cloud security design and engineering for firewalls in multiple environments (GCP, Azure, OCI)
• Knowledge on firewall and network infrastructure and topology
• Performs internal and external penetration validation testing to ensure that computer systems are up to date relative to all operating systems, patches, and virus protection software
• Participates in regular security vulnerability assessments
• Provides input into security breach response procedures; assists with security breach response activities
• Collaborates with other technology teams including Engineering to design and implement remediation solutions
• Solves difficult technical problems; solutions are testable, maintainable, and efficient
• Provides assistance during information security incidents as part of an Incident Response Team
• Analyzes the output of industry standard cybersecurity tools and helps identify remediations to reduce risk and exposure of applications
• Supports the implementation and maintenance of assigned information security solutions to ensure successful deployment and operation; develops and documents detailed standards (e.g., guidelines, processes, procedures)
• Provides support in the event of escalated security issues for enterprise systems; helps diagnose, troubleshoot, and resolve issues
• Assists the Information Security team in monitoring security systems, reviewing logs, and managing information security systems
• Remains aware of technological trends and developments in the area of information security
• Supports the implementation of hardware and software changes into environments to ensure security requirements are met
• Performs security tests against 3rd party products
• Knowledge of firewalls, web proxy, VPN, Network Access Control
• Participates in break/fix activities
• Assists the Information Security team in monitoring security systems, reviewing logs, and managing information security systems
• Completes basic custom enhancements of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities

Required Qualifications
Bachelors Degree in Computer Science, CIS, Engineering, Cybersecurity, or related field (or equivalent work experience in a related field)
4+ Years of experience in technology system support, software development or a related field
1+ Year of experience with information security applications and systems

Preferred Qualifications
Masters Degree in Computer Science, CIS, Business Administration, or related field
1 Year of experience working on project(s) involving the implementation of solutions applying development life cycles (SDLC)
2+ Years of experience analyzing the output of industry standard cybersecurity tools and identifying remediations to reduce risk and exposure of applications
Relevant information security certifications (e.g., CISSP, CISM, CEH, PCI ISA, CRISC, CISA, OSCP, GPen)
Advanced understanding of information security practices and policies
2+ Years of IT experience developing and implementing business systems within an organization
2+ Years of experience working with defect or incident tracking software
2+ Years of experience with technical documentation in a software development environment
2+ Years of experience working with an IT Infrastructure Library (ITIL) framework
2+ Years of experience leading teams, with or without direct reports
Experience with Cloud technologies