IT Senior Information Security and Risk Analyst
Atlanta, GA 30328 (Hybrid, in office 1-2 times per month)
Fulltime/Permanent Position
Bachelor’s degree in information security or a related field.
Experience working with security frameworks (e.g., ISO 27001) required.
Relevant cybersecurity certifications are preferred (e.g., CISSP, CISA, CISM).
Experience managing Microsoft Defender for Office 365 - safe attachments, safe links, anti-phishing policies, spoof/intelligence protection, and threat hunting.
Experience managing Security Email Gateways (Mimecast-preferred) - polices, mail flow, antispam/malware filters, reporting.
Experience investigating and remediating email-based threats like phishing, business email compromise, ransomware, impersonation, and malware.
Experience managing Endpoint Detection and Response platforms and performing alert triage, behavioral analysis, device isolation, threat hunting, remediation.
Experience leading or contributing to full incident lifecycle - triage, containment, eradication, recovery.
Experience with Security Information and Event Management (SIEM) concepts, threat intelligence, basic scripting, auditing, tuning.
Ability to analyze, collect, and categorize vulnerabilities in information systems to guide decision making.
Ability to organize, standardize, and manage detailed information while prioritizing multiple competing work efforts.
Ability to work collaboratively and effectively across teams, exercise sound judgment, and confidently navigate conflict resolution while analyzing, appraising, and resolving complex procedural, organizational, and administrative challenges.
Knowledge of incident response methodologies, cyber threats and vulnerabilities, adversarial tactics and techniques.
Knowledge of cybersecurity, ethics and privacy principles, along with related regulatory requirements.
Strong self-motivation with the ability to work independently and take initiative.
Qualified applications with arrest or conviction records will be considered for employment