Cyber Security Analyst

Position Overview:
The Information Security Analyst will become an integral member of the client’s Information Security Office (ISO) within the Security Operations team, reporting directly to the Director of Security Operations. This role is primarily responsible for managing and maintaining technical security controls that protect the confidentiality, integrity, and availability of the client’s information assets, ensuring they are safeguarded against unauthorized access, data loss, alteration, or damage.

Key Responsibilities:

• Analyze security anomalies detected by Extended Detection and Response (XDR) and Security Information and Event Management (SIEM) systems, assessing their severity and potential impact as part of established incident response protocols.

• Implement, maintain, and meticulously document security controls and safeguards designed to uphold the integrity, confidentiality, and availability of the client’s information systems.

• Review and evaluate infrastructure changes to ensure they align with established security standards and maintain appropriate levels of protection.

• Conduct network penetration testing, application vulnerability scans, and other security assessments to identify and address weaknesses.

• Promote security awareness initiatives throughout the organization, fostering a culture of vigilance and best practices among employees.

• Monitor internal control systems continuously to ensure that access to information is appropriately restricted and aligned with policy requirements.

• Provide support to various projects aligned with the client’s development lifecycle, integrating security considerations throughout.

• Perform other related duties as assigned to support the overall security posture of the organization.

Required Skills and Competencies:

• Intermediate-level professional with a strong technical orientation and well-developed analytical skills to effectively identify security issues and recommend appropriate solutions.

• Proficient in utilizing analytics to detect endpoint anomalies and execute timely incident response actions.

• Knowledgeable about malware techniques that exploit vulnerabilities in IT systems, devices, and networks, as well as social engineering tactics that compromise user security.

• Excellent interpersonal skills, capable of adjusting communication styles to effectively collaborate with diverse team members and stakeholders.

• Strong time management abilities with the capacity to prioritize tasks efficiently and respond promptly to security events.

• Demonstrated ability to take ownership of remediation efforts, while also seeking guidance and collaborating with team members or subject matter experts as needed.

Experience Requirements:

• A minimum of four (4) years of professional experience in at least two of the following areas:

  • Local and wide area network design or support

  • Information security administration

  • Systems administration

Educational Requirements:

• High school diploma, accompanied by an associate degree in information technology or an equivalent certification such as CompTIA Security+