IS Security Systems Analyst

Responsible for planning, implementing, upgrading and monitoring security measures for the protection of computer networks and information.

Ensures appropriate security controls are in place that will safeguard information and electronic infrastructure.

This position is extremely dynamic in the skills required but will require a security professional to grasp the complexities and challenges afforded working for a quick paced, and agile environment.

This position requires strong interpersonal and communication skills, an ability to work as part of a team or independently under minimal direction.

Interfacing with teams outside of the IS Department to gather requirements, collaborate, evangelize and incorporate security policy will be a key component of this role.

information.

Ensures appropriate security controls are in place that will safeguard information and electronic infrastructure.

This position is extremely dynamic in the skills required, but will require a security professional to grasp the complexities and challenges afforded working for a quick paced, and agile environment.

This position requires strong interpersonal and communication skills, an ability to work as part of a team or independently under minimal direction.

Interfacing with teams outside of the IS Operations group to gather requirements, collaborate, evangelize and incorporate security policy will be a key component of this role.

ESSENTIAL FUNCTIONS and RESPONSIBILITIES:


* Incident Response:



* Lead and participate in all phases of the incident response lifecycle (detection, containment, eradication, recovery, and lessons learned).


* Analyze security logs, alerts, and threat intelligence feeds from various sources (SIEM, EDR, IDS, firewalls, etc.) to identify and investigate potential security incidents.


* Conduct in-depth root cause analysis of security events to determine the cause and impact.


* Implement and maintain security controls to prevent and mitigate cyberattacks.


* Develop and maintain incident response plans and playbooks, including tabletop exercises and security drills.


* Collaborate with the SOC and MSSP to effectively monitor, investigate, and respond to security events.



* Threat Detection and Defense:
+ Proactively monitor the security posture of the organization.
+ Analyze security trends and threat intelligence to identify emerging threats and vulnerabilities.
+ Conduct vulnerability assessments, penetration testing, and threat hunting activities.
+ Implement and maintain security controls to protect against threats such as ransomware, malware, phishing, social engineering, and DDoS attacks.
+ Analyze phishing emails and other social engineering attempts and conduct security awareness training campaigns.
+ Configure and maintain security tools such as EDR, IDS, firewalls, SIEM, and other security technologies.



* Risk Assessment and Compliance:
...