Remote Security Analyst I

Summary

Join our SECOPs team as a highly skilled Security Analyst to identify, assess, and mitigate potential security risks to our organization's infrastructure, systems, and data.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• Relevant certifications (e.g., CISSP, CISM, GIAC) are highly desirable
• Proven experience working as a Security Analyst or in a similar role, preferably in a large enterprise environment
• Strong knowledge of information security principles, frameworks, and best practices (e.g., NIST Cybersecurity Framework, OWASP, CIS Controls)
• Experience with security assessment methodologies, tools, and techniques, including vulnerability scanning, penetration testing, and risk assessments
• Familiarity with security monitoring tools, SIEM solutions, and log analysis
• Solid understanding of network protocols, firewalls, intrusion detection/prevention systems, and other security technologies
• Knowledge of cloud security concepts and technologies (e.g., AWS, Azure, GCP) is a plus
• Excellent analytical and problem-solving skills, with the ability to think critically and make sound decisions under pressure
• Strong communication skills, with the ability to effectively convey complex security concepts to both technical and non-technical stakeholders
• Demonstrated ability to work independently, as well as collaboratively in a team environment
• Strong attention to detail and a commitment to maintaining high standards of data integrity and security

Responsibilities

• Identify and assess security risks: Conduct comprehensive security assessments to identify vulnerabilities, weaknesses, and potential threats to our organization's infrastructure, systems, and data
• Incident response and threat management: Monitor security events, investigate potential incidents, and respond promptly to security breaches or threats. Analyze security logs and data to identify patterns or indicators of compromise
• Vulnerability management: Perform regular vulnerability assessments and penetration testing to identify weaknesses in our systems and infrastructure. Collaborate with relevant teams to prioritize and remediate vulnerabilities in a timely manner
• Security monitoring and analysis: Utilize security information and event management (SIEM) tools to monitor and analyze security events and alerts. Identify and respond to security incidents, including conducting root cause analysis and implementing necessary measures to prevent future incidents
• Security policy and compliance: Develop, implement, and maintain security policies, procedures, and guidelines to ensure compliance with relevant regulations and industry standards (Monitor and enforce compliance across the organization.)
• Security awareness and training: Develop and deliver security awareness programs and training materials to educate employees on best practices for data protection, safe internet usage, and security incident reporting
• Security documentation and reporting: Prepare detailed reports on security findings, risk assessments, incident response activities, and other security-related matters. Communicate findings, recommendations, and status updates to relevant stakeholders, including management and technical teams

Benefits

• Competitive pay structure
• Matching 401(k) with immediate vesting
• Medical, dental, vision, life, & short-term disability insurance