Security Anaylst
Hybrid-Remote/ FULL-TIME
Summary
Cyber Security Analyst (CSA) is responsible for assisting with the day-to-day operations of securing various information systems. The CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the Information Technology department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA conducts penetration tests, and researches and reports on emerging threats, to help the firm take pre-emptive risk mitigation steps. The CSA effectively correlates and analyzes security events within the context of the unique environment to proactively detect threats and mitigate attacks before they occur.
Key Responsibilities
Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur.
Provides technical expertise regarding security-related concepts to operational teams within the Information
Review, investigate, and respond to real-time alerts within the environment.
Review real-time and historical reports for security and/or compliance violations.
Monitor online security-related resources for new and emerging cyber threats.
Assesses new security technologies to determine the potential value for the enterprise.
Conducts vulnerability assessments of firm systems and networks.
Key Skills
A four-year college degree or equivalent industry training and certifications.
1-year experience in a security analyst or related position.
Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems.
Thorough understanding of cloud technology (AWS, Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.
Proficiency with Windows PowerShell, CMD line, etc.
Linux is a plus
Certifications such as Security+, AWS SAA, Cyberframeworks,
Understanding and enforcing security and compliance frameworks such as NIST, Cobit, and ISO.
