IT Security Analyst

POSITION OPPORTUNITY
The IT Security Analyst (SA) is responsible for assisting with the day-to-day operations of securing various information systems.

Reporting to the Vice President of Information Technology, the Security Analyst is tasked with providing technical expertise in all areas of network, system, and application security. The SA works closely with the various teams in the Information Technology department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls.

The Security Analyst leads the firm's vulnerability management program, manages the annual cybersecurity assessments and penetration tests, research and reports on emerging threats, to help take pre-emptive risk mitigation steps.

Essential Duties / Responsibilities

• Lead the vulnerability management program (internally)


• Manage annual cybersecurity assessments and penetration tests, while researching and reporting on threats


• Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur.


• Provides technical expertise regarding security-related concepts to operational teams within the Information Technology Department and the business.


• Review, investigate, and respond to real-time alerts within the environment.


• Review real-time and historical reports for security and/or compliance violations.


• Monitor online security-related resources for new and emerging cyber threats.


• Assesses new security technologies to determine potential value for the enterprise.


• Conducts vulnerability assessments of firm systems and networks.


• Manage systems owned by the Information Security Team.


• Analyze and implement projects in compliance with U.S. Export Control Laws.

Qualifications

Education/Training/Certifications: Bachelor's degree in a technical discipline or equivalent experience required.

Related Experience: 1 to 3 years of experience working in a security analyst setting or related field. Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO. Experience with creating, implementing, and managing a threat hunting program within a corporate environment is preferred.

Knowledge/Skills/Abilities:

• Technical knowledge of enterprise technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems.


• Thorough understanding of Microsoft's enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.


• Proficiency with Windows PowerShell.


• Working knowledge with technology vendors and products such as Proof Point, Arctic Wolf, Microsoft XDR, Sentinel, Fortinet.


• Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO.


• Working experience with creating, implementing, and managing a threat hunting program within a corporate environment.


• Strong writing skills, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff.


• Ability to work independently or in a group with minimal direction (need to work through all the details of broad minded projects, and know how and where to find the needed information to complete those projects).


• Strong communication skills, both technical and non-technical, to collaborate effectively with internal teams and vendors


• Legal capacity to comply with federally mandated requirements of the U.S. Export Control Laws.

Environment

• Must be able to perform above listed duties/responsibilities in the field and field offices.


• Must be able to travel occasionally to other locations.


• Will be exposed to dusty and noisy conditions periodically.

Physical Requirements

• Standing


• Walking


• Sitting


• Use of hands, fingers


• Reaching with hands and arms


• Climb and balance


• Stoop, kneel, crouch or crawl


• Talk and hear


• Distance vision (clear vision at 20 feet or more)


• Peripheral vision (ability to observe an area that can be seen up and down or to the left and right while eyes are fixed on a given point)


• Depth perception (three-dimensional vision, ability to judge distances and spatial relationships)

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, and Los Angeles County Fair Chance Ordinance. For unincorporated Los Angeles county, to the extent our customers require a background check for certain positions, the Company faces a significant risk to its business operations and business reputation unless a review of criminal history is conducted for those specific job positions.