Information Security Analyst

Job Description - Information Security Analyst- (226 Days) (RTP)

Job Description

Information Security Analyst- (226 Days) - ( RTP )

• This role provides cybersecurity analysis, incident response orchestrating and monitoring for data networks, servers, endpoints and mobile devices. The ideal candidate with have expertise with cybersecurity attack methodologies, SIEM correlation, SOC operations and willingness to aid in coordinating various IT security projects of a sensitive and r highly confidential nature. This role participates in annual IT audits, internal audits, external audits and assists with the developing, recommending, implementing IT security policies and security framework best practices.
• Conducts compliance monitoring and management activities in areas of policy and standards
• Contributes to the development of information security compliance monitoring and management methodology, procedures and practice
• Conducts gap analysis and makes recommendations for changes in existing policies, operational and technical standards based upon findings
• Develops checklists and other tools in support of technical/administrative audits
• Supports and manages IT security solutions including multi-factor authentication, Identity management, audit and logging, SIEM administration and application web-filtering analysis
• Participates in IT projects by providing IT Security support architecture (process, procedure and technical support)
• Conducts vulnerability assessments and management for all systems and environments
• Develops and manages vulnerability assessments and management processes and procedures.
• Develops and updates IT security policies, processes, procedures and standards

• Bachelor’s degree in information management, information assurance, mathematics or related field; or equivalent combination of education and work experience
• Three or more years of IT security work experience
• Prior experience using IT security hardware and software
• Familiarity with Security Information and Event Management systems
• Network scanning tools, software and analysis
• Multi-factor Authentication
• Application and e-mail filtering
• Critical thinking skills and ability to solve complex problems
• Basic understanding of data encryption Basic understanding of NIST data protection framework