IT Security Analyst - Onsite at Pearl River, NY & Princeton, NJ - 1+ Year Contract

Job Details:

Job Title: IT Security Analyst

Location: Onsite at Pearl River, NY & Princeton, NJ

Duration: 1+ Year Contract

Description:

We are seeking an IT Security Analyst to help ensure that our IT infrastructure and security processes are resilient against the latest threats. You will be responsible for hunting for, exploit testing, analyzing and assessing vulnerabilities across a wide range of technologies. You'll engage with various technology partners to test assumptions of our security posture, and manage identified vulnerabilities through remediation. You will work directly with other cross department security engineering and incident response teams to set strategic direction for our enterprise Threat and Vulnerability Management program.

Responsibilities:

• Perform IT Security assessments and partner with other security or IT professionals to assess potential impact from vulnerabilities and determine appropriate mitigating controls.
• Build strong partnerships with technical teams to promote best practices for managing vulnerabilities across traditional infrastructure and in cloud environments.
• Understand business requirements and work with business partners to define appropriate solutions; meeting both security mandates and business needs
• Help standardize workflows, processes, procedures, and reporting
• Produce metrics and key performance indicators that demonstrate the effectiveness of the team s remediation efforts across the enterprise
• Improve the design and usefulness of our IT Security management tools and solutions.
• Have excellent interpersonal and effective communications skills

Required Skills and Experience:

• 5+ years IT operations, systems management or IT Security related experience.
• Hands-on expertise working with enterprise network architectures, Linux and Windows OS, system administration or as a software developer.
• Knowledge of IT security and system hardening best practices; including but not limited to operating systems (Windows, Unix, Linux), public cloud, web applications, network devices, SDLC processes, and concepts.
• Knowledge of Active Directory best practices and application of security hardening.
• Experience analyzing vulnerability findings from IT and Security management tools.
• Understanding of industry standards such as NIST, CVE, CPE and CVSS.
• Ability to interpret complex data sets to make informed risk-based decisions.
• Can effectively manage complex tasks, projects, and initiatives.

Nice to Have Skills:

• Solid understanding of Risk management frameworks.
• Experience working with operational vulnerability scanners, attack surface / path management tools (ie: Rapid7, Qualys, Nessus, Bloodhound).
• Ability to learn and implement technologies quickly.
• A bachelor's degree in Computer Science, Engineering, Information Security, or other related fields.
• 2+ years of Python Programming experience.