Cyber Security Analyst

Company Overview

Johnstone Supply: Empowering HVACR contractors since 1953 with a vast selection of equipment, parts, and supplies across 450+ locations in the US and Canada. Supported by six regional centers, we prioritize customer service, training, and growth programs for residential, light commercial, refrigeration, and facilities maintenance businesses. We foster strong relationships, value teamwork, and offer a supportive environment with career development opportunities. Join our established and growing organization where collaboration drives success. The strength of Johnstone Supply lies in our people, partners, and customers.

Cyber Security Analyst

Join Johnstone Supply, a leading North American HVACR distributor with over $4 billion in annual sales, as a Cyber Security Analyst. You’ll be crucial in safeguarding our technology landscape, implementing security measures, and developing next-gen defenses against cyber threats. This role involves daily security operations, defining security practices, implementing controls, leading security escalations, and acting as a security consultant for projects. You’ll also evaluate technologies, track compliance, manage security vendors, and drive security awareness.

Key Responsibilities:

• Manage daily security operations and enhance existing infrastructure.
• Develop and implement security and data management practices.
• Define and enforce network and system security controls.
• Lead contact for security incidents, ensuring resolution and prevention.
• Provide security consultation for IT projects.
• Evaluate and recommend security enhancements across platforms.
• Produce and communicate security compliance metrics.
• Manage security software inventory and vendor relationships.
• Drive security awareness campaigns.
• Identify and recommend security efficiency improvements.
• Maintain security process documentation and platform architectures.
• Administer security controls based on requirements and change requests.
• Optimize system performance and troubleshoot issues.
• Perform system management tasks (patching, maintenance).
• Participate in on-call rotation.

Requirements:

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
• 5+ years in IT, with 3+ years in enterprise Information or Network Security.
• Knowledge of Cyber Security Frameworks (NIST, PCI DSS).
• Strong understanding of OSI model, system processes, and IP networking.
• Experience with Windows Server/Workstation and security tool administration (firewalls, IDS, endpoint protection, IAM, DLP).
• Knowledge of Cyber Security Operations (Monitoring, Detection, Incident Response).
• Proficiency in managing Windows Servers/Applications (AD, DHCP, DNS, IIS, GPOs) and virtualization platforms (VMWare, Citrix).
• Experience securing public cloud environments (Azure, AWS) and managing Palo Alto Firewalls.
• Strong troubleshooting skills (networks, applications, databases).
• Experience implementing and managing IAM and Vulnerability Management systems.
• Ability to work with and manage IPS/IDS/IDPS systems.
• Expertise in risk assessment and mitigation.
• Previous EDR and NGAV management experience.
• Knowledge of PCI Compliance requirements.
• Experience with Linux and Pen-Testing (preferred).
• Skill in developing security policies and procedures.
• Strong analytical, problem-solving, and communication skills.
• Ability to manage third-party vendors and work independently or in a team.