Information Security Analyst

Job Title: Information Security Analyst (Inperson in AL)
Location: Onsite – Montgomery, AL
Interview Method: In-person preferred; virtual interviews available for non-local candidates

Overview:

The Information Security Analyst will join AMA''s Information Security Office (ISO) Security Operations team, reporting to the Security Operations Director. This role is responsible for implementing and maintaining technical security controls to safeguard the confidentiality, integrity, and availability of AMA''s information assets.

Key Responsibilities:

The analyst will perform duties within the ISO''s Security Operations Center (SOC), including:

- Analyze anomalies from Extended Detection and Response (XDR) and Security Information and Event Management (SIEM) systems to assess severity and impact.
- Implement, maintain, and document security safeguards.
- Review infrastructure changes to ensure adequate protection.
- Conduct network and penetration tests, and application vulnerability scans.
- Promote information security awareness across the organization.
- Monitor internal control systems to maintain appropriate access levels.
- Support projects throughout AMA''s systems development life cycle.
- Perform other duties as assigned.

Required Skills & Qualifications:

- Minimum 4 years of Information Security experience.
- Strong analytical skills for effective security analysis and incident response.
- Ability to identify endpoint anomalies and malware exploitation techniques.
- Understanding of social engineering tactics.
- Advanced interpersonal and communication skills.
- Excellent time management and prioritization abilities.
- Ability to take prompt action on security events and collaborate with team members or subject matter experts.

Required experience with the tools below:
- ProofPoint Targeted Attack Protection, Cloud Threat Response, Protection Server, ZenGuide
- CrowdStrike Falcon EDR

Experience with the tools below is a plus:
- Microsoft Defender XDR
- Microsoft Sentinel
- SonarQube
- Tenable
- OpenText WebInspect
- Syslog-NG


Preferred Certifications:
CompTia Security
ISC2 Certified in Cyber security
Certified Ethical Hacker
Microsoft SC-200