Job Description

Overview

The Cyber Security Analyst (CSA) is responsible for assisting with the day-to-day operations of securing the organizations various information systems. Reporting to the Information Security Manager, the CSA provides technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the organization to ensure that systems and networks are designed, developed, deployed, and managed with strong security and risk management controls. The CSA leads the organizations vulnerability management program, manages the annual cybersecurity assessments and penetration tests, and researches and reports on emerging threats to help the organization take pre-emptive risk mitigation steps. The CSA correlates and analyzes security events to proactively detect threats and mitigate attacks before they occur.

Responsibilities

• Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur
• Provide technical expertise regarding security-related concepts to operational teams
• Review, investigate, and respond to real-time alerts within the environment
• Review real-time and historical reports for security and/or compliance violations
• Monitor online security-related resources for new and emerging cyber threats
• Assess new security technologies to determine potential value for the enterprise
• Conduct vulnerability assessments of firm systems and networks
• Draft reports and presentations for clients
• Keep abreast of the latest cybersecurity threats and technologies
• Work with IT and other departments to ensure security best practices are followed

Requirements

• A recognized degree or equivalent industry training and certifications
• Three to five years of experience in a security analyst or related position
• Experience in developing security solutions on one or more cloud platforms (AWS, GCP or Azure) and applying the cloud native security services
• Understanding of security concepts and tools - Certificates, DLP, WAF, SIEM, firewalls, DDOS prevention
• IDS/IPS, privileged access management, Encryption, SSL, VPN, IPSec, TCP/IP, DNS and web security architecture
• Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems
• Thorough understanding of Microsofts enterprise technology platform, including Azure, Active Directory, SQL, Office365, and Windows server and desktop operating systems
• Document risks, security controls and evidence to ensure compliance
• Strong writing skills, and the ability to articulate security-related concepts to a broad range of technical and non-technical staff
• Experience with creating, implementing, and managing a threat hunting program within a corporate environment
• Demonstrated experience implementing and/or enforcing security and compliance frameworks
• Ability to work autonomously and solve problems

Desired Qualifications

• One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC
• Experience managing and securing both on-premise and hosted systems and applications
• Experience with application and database security
• Experience in setup of policies and procedures that ensure effective cloud resource management, monitoring, cost control, and operational efficiency

Job Tags

Similar Jobs