Security Analyst

Responsibilities

• Identify new threats to IT systems and create rules to identify, prevent and remediate.
• Expand security auditing and ensuring the proper ongoing operations of security tools.
• Providing internal information security consulting for other business and IT projects. This includes identifying, documenting and implementing secure configurations and architectures.
• Assist with the creation and maintenance of security policies, standards, guidelines and other documentation for IT and business audiences.
• Responsible for security metrics on a monthly basis to ensure the proper service levels are maintained.
• Support incident response lifecycle including identification, triage, remediation and communications for security breaches and malware infections.
• Identify latest security vulnerabilities, malware, breaches, and industry news which could affect the firm.
• Maintain vulnerability management process including identification, rating, remediation and monitoring.
• Provide additional coverage for approvals and notifications to other IT groups for critical time‑sensitive operations including firewall changes, password reset approvals, and application vetting.
• Assist with automation of security processes, integration of security platforms, and creation of tools.
• Ongoing reviews of access controls by investigating improper access; revoking access; reporting violations; monitoring requests; recommending improvements.
• Provide technical leadership for incident response capabilities including malware analysis, breach investigation, and remediation efforts.
• Create internal training materials and other items to support the advancement of information security within the firm.
• Maintain awareness of industry trends and their advantages with the ability to make recommendations for improving technology used by the firm.
• Participate in and/or manage cross‑functional team projects to implement new or updated technology.
• Cross‑train other IT staff in security best practices, use or maintenance of technology.
• Effectively manage small projects.
• Display professionalism, quality service and a "can do" attitude to internal members/departments of the firm as well as external clients and vendors via electronic and print correspondence, over the telephone and in‑person.
• Provide information security knowledge transfer to other IT staff and business.
• Assume additional responsibilities as assigned.

• Bachelor’s Degree or equivalent.
• Minimum of 3 years’ experience working in the capacity of an Information Security Analyst.
• CISSP or equivalent preferred.
• Expert knowledge in IT Security frameworks and solutions.
• Active participation in IT Security Forums inside/outside of the Legal Industry.
• Excellent technical communication skills with a strong desire to achieve customer satisfaction; must be able to communicate effectively across entire organizations.
• Operating knowledge of security configurations with respect to one or more of the following security products:
  • SIEM:
    Splunk, Sentinel
  • Firewalls:
    Cisco, Palo Alto Networks
  • IDS/IPS:
    Cisco, Palo Alto Networks
  • NAC:
    Cisco, Aruba
  • Vulnerability Management:
    Tenable, Rapid7
• Operating knowledge of security issues associated with one or more of the following cloud platforms:
  Azure, AWS.
• Strong security knowledge of O/S (desktop and server) Security – Windows, Mac, Linux.
• Strong security knowledge of browser security issues (Edge, Chrome).
• Ability to learn new technologies and security features.
• Excellent analytical, problem‑solving and troubleshooting skills.
• Excellent organizational, interpersonal, communication and customer service skills.
• Knowledge of ITIL Service Management principles.

Demonstrates expertise in IT Security frameworks and solutions, with a strong focus on incident response, vulnerability management, and security policy development. Proficient in security automation and integration of security platforms, ensuring effective communication and collaboration across teams.

• Information Security Analyst Experience
• CISSP Certification
• IT Security Frameworks Knowledge
• Security Automation Skills
• Vulnerability Management Expertise

• IT Security Frameworks
• Incident Response
• Vulnerability Management
• Security Policy Development
• Malware Analysis
• Security Configurations
• Programming
  
  Languages:
  
  Python, Powershell, Node.js
• Security Automation:
  Logic Apps, Power Automate, Splunk
• Operating Systems Security:
  Windows, Mac, Linux
• Cloud Platforms:
  Azure, AWS

• Technical Communication
• Analytical Skills
• Problem Solving
• Organizational Skills
• Interpersonal Skills

• Bachelor’s Degree
• CISSP or Equivalent

• Information Security
• Security Auditing
• Security Best Practices
• ITIL Service Management
• Legal Industry Security Standards

• SIEM:
  Splunk, Sentinel
• Firewalls:
  Cisco, Palo Alto Networks
• IDS/IPS:
  Cisco, Palo Alto Networks
• NAC:
  Cisco, Aruba
• Vulnerability Management:
  Tenable, Rapid7