Cyber Security Analyst

The Cyber Security Analyst will report to the Information Security Manager and has responsibility for assisting with risk assessments, enterprise vulnerability assessments, operating security software, evaluating third party risk, and designing controls for AI systems Utilizes and analyzes metrics to produce recommendations for future controls and improvements. Responds to alerts, contains cyber security incidents, and routinely interfaces with personnel throughout H&H.

This position requires advanced knowledge of information technology verticals across the enterprise, the ability to quickly ascertain the associated security controls, and the ability to positively influence others to implement the controls.

• Identify and document security and privacy risk. Using knowledge of best practice, will identify methods to control the risk and assist with control implementation.
• Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats. May interface with vendors to budget and plan for future security controls.
• Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines.
• May install and administer security protection devices including end point protection (EPP) and SIEM technology.
• Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools.
• Utilize malware analysis and sandboxing tools to analyze suspicious events.
• Leverage security tools to analyze suspicious links, email and documents.
• Implement remediation controls to block suspicious email and other threats.
• May evaluate and analyze events using Security Event and Incident Management (SEIM) tools. Will develop reporting from SEIM and other devices.
• Assists in developing and implementing Security Awareness and Phishing Awareness campaigns. Through analysis of campaign data, will recommend addition controls to improve security.
• Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics.
• Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems.
• Inform others within IT Security and IT Management regarding security issues.
• Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks.
• Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements. Will integrate threat intelligence sources with vulnerability management processes.
• May conduct third party risk assessments and audits through application of established criteria.
• May evaluate and propose controls for AI systems.
• Identify methods to document and track third-party risk and get third party commitment to implement risk controls.
• May conduct privacy impact assessments of third parties using established processes.
• Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained.
• Maintains vulnerability management program and scanning engines.
• Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques.
• Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations.
• Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure.
• Provides evaluation of suspected malware and provides recommendations of remediation.
• Provides recommendations on physical security risks and controls.
• Supports and provides recommendations for access controls for applications, systems, and networks.
• Communication :
  
  Understands the importance of and demonstrates verbal, written, and non-verbal communications.
• Customer/Client Experience :
  Creates a consistent and exceptional experience for others, whether directly to external clients/customers or indirectly through internal support, that elevates the overall perception of the firm.
• Organization & Planning :
  
  Proactively takes actions, finds solutions, and displays skills to be efficient and productive.
• Team Player :
  
  Works within team and cross-functionally to meet required results.