Senior Analyst Information Security

Sr. Security Analyst

Locations:
San Antonio, TX, Dallas, TX, Maryville, TN, or Cincinnati, OH preferred.

• Configure, analyze, report and address security alerts within the IT technology stack across global locations
• Proactively remediate information technology security threats as the SME for the security team
• Design, document and implement IT security measures and controls to ensure compliance mandates
• Manage, architect and implement security-specific technologies (Firewalls, IDS/IPS, Web and Email Security, SIEM, MFA, SSO, Proxies, etc.)
• Anticipate security alerts, incidents and disasters in order to reduce their likelihood
• Conduct risk and security assessments through vulnerability analysis, patch management and mitigation
• Perform mitigation support for both internal and external security audits
• Investigate, analyze and document security breaches to identify and document the root cause
• Understand the Cyber Kill Chain and what defensive options are available at each step
• Provide Threat Hunting support and mentoring against anomalous behavior within the enterprise
• Partner with the server and network teams to remediate network and system vulnerabilities
• Remediate detected vulnerabilities to maintain a high-security standard and provide guidance in remediation
• Develop and document company-wide best practices for IT security
• Research security enhancements and make recommendations for improved policy and process
• Analyze IT requirements and provide objective advice on the use of new IT security offerings
• Stay up-to-date on information technology trends and security standards
• Design, implement, administer, support and maintain cybersecurity technology systems (Endpoint Protection, IDS/IPS, Web and Email Security, SIEM, Multi-Factor Authentication, Network Access Controls, DLP, etc.)
• Analyze, report and respond to security alerts within the various IT technologies and global locations
• Proactively remediate information technology security threats as a member of the security team
• Assist in the designing, documenting, architecting and implementing IT security measures and controls
• Provide support through ‘Threat Hunting’ against anomalous behavior within the enterprise. Correlates activity across assets (endpoint, network, apps) and environments to identify patterns of anomalous activity
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources
• Threat mitigation; malicious code detection, response and prevention; operating system security oversight
• Conduct risk and security assessments through vulnerability analysis and reporting
• Perform mitigation support for both internal and external security audits
• Investigate, analyze and document security incidents to identify and document the root cause
• Provides incident response support including mitigating actions to contain activity and facilitating forensics analysis when necessary
• Partner with IT Operation teams to remediate system vulnerabilities
• Participates in the production of documentation and management reporting
• Research security enhancements and make recommendations for improved policy and process
• Analyze IT requirements and provide objective advice on the use of new IT security offerings
• Stay up-to-date on information technology and cybersecurity trends and standards
• Other IT Security-related duties as required

• Must be authorized to work in the U.S.
• Undergraduate degree required with focused curriculum on IT security, or with relevance to IT infrastructure and Security
• 5-7 years IT security including 3-5 years network or system administration experience with a proven ability to engage with Senior Management and regulators.
• History of planning and delivering IT Security and Compliance Projects in a Global setting
• Self-directed with the ability to prioritize workload based on known deliverables
• Excellent written and oral communication skills in support of policy, procedure and best practices
• Some travel required
• Expertise in SIEMs (Rapid7, Sentinel, etc.), endpoint protection, vulnerability management tools, and security automation.
• Strong understanding of network and application security,…