Senior IT Security Analyst

Duties

Job Contributions

• Oversee the monitoring, investigating, and reporting of security-related events
• Conduct regular security assessments and analysis of systems on a periodic basis
• Lead the planning, development, and execution of tabletop exercises to evaluate and enhance the organization's incident response capabilities
• Promote and monitor end-user adherence to IT policies, standards, and best practices
• Maintain up-to-date documentation of security-related systems, controls, and processes, including security architecture diagrams
• Identify vulnerabilities in internal and external systems and applications, recommend mitigation strategies, and track their resolution
• Perform security evaluations of new applications and programs prior to installation or upgrades
• Develop, validate, and maintain incident response plans and processes to address potential threats
• Review vulnerability scans, identify necessary actions, and coordinate with appropriate teams for timely resolution
• Evaluate, recommend, and oversee the use of various security tools and solutions to protect IT assets
• Collaborate with other IT teams to ensure cohesive security measures across the organization
• Provide security awareness training to staff and develop educational materials on best practices
• Stay informed about emerging threats and security trends, recommending and implementing new security measures as needed
• Ensure compliance with relevant industry standards and regulations

 Earn a Degree in Crime Scene Investigation, Forensic Science, or Computer Forensics

Requirements

We Require

• Five years experience in IT security and compliance or a related field
• Three years experience in information security or related field
• Three years experience with computer network penetration testing and techniques
• Bachelor’s degree in computer science or a related field
• Other combinations of education and experience may be considered in substitution for the minimum qualifications.

We Also Value

• In-depth understanding of security technologies and concepts, including firewalls, proxies, Security Information and Event Management (SIEM) systems, Intrusion Detection and Prevention Systems (IDPS), and endpoint protection solutions
• Strong ability to identify, assess, and prioritize network and system vulnerabilities, coupled with expertise in recommending appropriate mitigation strategies
• Familiarity with penetration testing methodologies and common hacking techniques to better understand and anticipate potential threats
• Proficiency in security architectures and protocols, including authentication and access control technologies, encryption and key management, network traffic analysis, and Web Application Firewalls.
• Experience with incident handling procedures and forensic analysis techniques
• Knowledge of cloud security principles and best practices
• Familiarity with DevSecOps practices and tools for integrating security into the development lifecycle
• Strong analytical skills with the ability to translate technical findings into actionable recommendations for both technical and non-technical stakeholders

Working Conditions

• Mostly office setting in a high volume, fast-paced environment
• Requires long periods of sitting while completing computer activities

Do you have the Education Required? See available on-line and campus-based degree programs now!