Senior Analyst, Cyber Security

About This Opportunity

In this role, you will be responsible for safeguarding our organization’s digital assets and infrastructure from potential security threats and vulnerabilities. You will work closely with cross-functional teams to design, implement, and monitor security measures that protect the organization’s network, systems, and data from cyberattacks, ensuring the ongoing safety and compliance of the organization's infrastructure technology & operational technology environments.

Responsibilities

•    Conduct regular security assessments and audits to identify vulnerabilities.
•    Monitor network traffic for unusual activity and potential threats.
•    Design and implement security protocols and policies.
•    Install and maintain firewalls, antivirus software, and other security tools.
•    Investigate and respond to security breaches.
•    Develop and execute incident response plans to mitigate damage.
•    Conduct training sessions to educate employees on security best practices.
•    Develop awareness programs to reduce the risk of data theft.
•    Plan and manage cybersecurity projects.
•    Communicate project progress and issues to stakeholders.
•    Configure and manage security controls within cloud environments, including firewalls, encryption, and access controls.
•    Implement and maintain web and email security protocols to protect against threats such as phishing and malware.
•    Conduct regular vulnerability assessments and penetration testing to identify and mitigate security risks.
•    Implement and manage IAM policies and procedures, including user provisioning, de-provisioning, and role-based access control (RBAC).
•    Maintain detailed records of network configurations, cloud security configurations, IAM policies, DLP, security policies, and incident responses.
•    Work closely with other teams and security teams to ensure comprehensive protection of the organization.
•    Provide training and support to staff on network security best practices and emerging threats.
 

Qualifications

•    A degree in cybersecurity, computer science, or a related field.
•    5+ years of experience in cybersecurity.
•    Deep understanding of security protocols, threat intelligence, risk management, and incident response.
•    Common certifications include CompTIA Security+, CISSP, and CEH, Microsoft SC200, and AZ500.
•    Strong understanding of information security principles and practices and experience with security technologies such as network security, SIEM, EDR, DLP, IoT IPS/IDS, email security and vulnerability scanners. Cloud security is considered an asset. 
•    Familiarity with NIST 800-53, NIST 800-82, ISA/IEC 62443.
•    Analytical Thinking: Ability to analyze complex problems and develop effective solutions.
•    Attention to Detail: Being meticulous in monitoring systems and identifying potential threats.
•    Communication: Clearly conveying security policies and procedures to non-technical staff.
•    Problem-Solving: Quickly and effectively addressing security incidents.
•    Continuous Learning: Staying updated with the latest security trends and technologies.