Information Security Analyst

Corinth
7701 Stemmons Fwy
Corinth, TX 76208, USA

Position Summary

The Information Security Analyst III will work under the direction of the Information Security Manager to respond to security events, assess vulnerabilities, and minimize risk to maintain the confidentiality, integrity, and availability of CoServ Information and Information Systems. As a senior level information security position, the Information Security Analyst III manages various programs (such as Vulnerability Management, Incident Response, etc.), and also performs key tasks to include the development, reporting, and dissemination of information security metrics pertaining to the CoServ information security program, training junior level Analysts, and responding to information security incidents.

• Perform tasks at the direction of the Information Security Manager in support of various security programs in support of security policy, regulatory requirements, and standards.
• Develop tactical procedures relevant to security areas they are assigned, to include security program documentation/plans, and response plans/playbooks.
• Administrates, monitors, and troubleshoots Information Security systems (to include EDR, IDR, MDR, TVM, and XDR) in support of security operations and event investigation.
• Reviews logs, reports, and events to detect potential security incidents. Performs security incident response Analysis, Containment, Eradication, and Recovery efforts with IT/OT teams. Generates Incident Response Reports.
• Reviews various sources of Threat Intelligence to identify potential threats to CoServ, makes recommendations and implements remediation actions. Performs Threat Hunts and digital forensics as needed.
• Establish and maintain strong working relationships with Business, IT, and OT stakeholders, communicate and clarify security-related roles & responsibilities with them, and leverage those relationships to enhance the security of endpoints, infrastructure, network, and software.
• Works with Business, IT, and OT stakeholders to develop system baselines, and support change and configuration management processes.
• Routinely monitors and communicates vulnerability metrics with various system owners and stakeholders in support of timely remediation.
• Support business projects and analyze provided systems information in support of identifying security risks and vulnerabilities and communicating remediation recommendations with associated project teams.
• Performs vendor security risk assessments using established processes and advises on opportunities to reduce security risk in alignment with risk appetite.
• Identifies security capability metrics opportunities and gathers data in support of reporting to reflect the current CoServ Information Security risk landscape.
• Assess, monitor, and report on the current corporate information security climate to the Information Security Manager, to include the identification of security risks/gaps, strengths, and opportunities.
• Identify opportunities to expand CoServ security awareness and training needs.
• Aid in the training of junior Information Security Analysts.
• Complies with established CoServ safety and operating rules, procedures, and guidelines. Responsible for reporting unsafe practices to a supervisor.
• Complies with established CoServ Information Security Handbook, policies, procedures, and guidelines. Responsible for reporting suspected information security incidents to Tech Support.

• Has a high-level understanding of Regulatory Requirements and Information Security Frameworks and responds to efforts to meet CoServ Information Security obligations.
• Performs other duties and activities as directed or required.

• High School Diploma or G.E.D.
• Bachelor’s Degree in MIS, Computer Science, or equivalent work experience.
• CISSP or equivalent.
• 7+ years experience in Information Security with a focus on information security risk, incident response, or compliance.
• Experience in responding to Cyber Incidents, Threat Hunting, Forensics, working with various SIEM and Incident…