Description:

Job Title: Information Security Analyst

Job Overview:

The Information Security Analyst I supports the company’s existing information security programs and provides technical and analytical support for all aspects of our information security management system. The goal of the role is to ensure confidentiality, integrity and availability to all systems and company data assets.

Job Responsibilities:

• Participates in the operation of our security operations center (SOC).
• Monitors systems for potential security breaches; investigate incidents, identify threats, and take appropriate action to mitigate risks.
• Participates in the development and implementation of security policies, standards and procedures to safeguard against unauthorized access, modification and destruction of information assets.
• Participates in 3rd party security audits and 3rd party pen testing services.
• Works on the roll out of new security tools and processes.
• Creation and management of security awareness training campaigns and phishing simulation campaigns.
• Provides technical support for investigating security incidents, e.g., phishing attacks, DDoS attacks, data leaks, account compromises, etc.
• Knowledge in Computer Network Defense, Database Administration, Encryption, Information Systems/Network Security, Operating Systems and Technology Awareness
• Knowledge of data backup and recovery.
• Knowledge of business continuity and disaster recovery continuity of operations plans.
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of controls related to the use, processing, storage, and transmission of data.
• Knowledge of encryption algorithms.
• Knowledge of the organization’s enterprise information technology (IT) goals and objectives.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of measures or indicators of system performance and availability.
• Knowledge of network traffic analysis methods.
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of server and client operating systems.
• Knowledge of current and emerging threats/threat vectors.
• Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.
• Familiar with AWS security architecture and tools and Microsoft Azure security architecture and tools.

Job Requirements: