Cybersecurity Analyst III - V

JOB DUTIES/ESSENTIAL FUNCTIONS

• Endpoint Security Management:
  Manage endpoint detection and response (EDR) solutions and ensure optimal configuration and operation across corporate systems. Monitor and respond to endpoint threats, implement remediation measures, and maintain system integrity.
• Cloud Security Management:
  Design, implement, and maintain cloud security solutions, focusing on platforms such as Microsoft 365 and Microsoft Azure. Ensure secure configurations, monitor cloud environments for potential threats, manage access controls, and safeguard cloud-based resources.
• Data Protection and Classification:
  Develop and implement data protection strategies, including encryption, secure storage, and access control measures. Establish and maintain data classification frameworks to ensure sensitive information is securely handled and complies with regulatory requirements.
• Threat Intelligence, Incident Response, and Investigation:
  Monitor emerging threats and maintain situational awareness through threat intelligence platforms. Respond to security incidents by investigating root causes, analyzing attack vectors, and documenting findings. Collaborate with teams on mitigation strategies to prevent recurrence and improve overall security posture.
• Cybersecurity Tools Management:
  Deploy, configure, and maintain cybersecurity tools and capabilities, such as intrusion detection systems (IDS), security information and event management (SIEM) systems, vulnerability management platforms, and other security solutions. Monitor tool efficacy and update configurations as needed.
• Policy, Architecture, and Standards Development:
  Establish, review, and update cybersecurity policies, architectures, and standards to align with industry best practices and regulations. Collaborate with stakeholders to ensure policies are actionable and effectively implemented across the organization.

Education: A Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Engineering, Information Systems, or a related field from an accredited college or university.

Experience: Minimum of 4 years in managing cybersecurity tools, implementing secure cloud configurations, leading data protection strategies, and conducting security investigations.

Equivalent

Experience:

Minimum of 8 years of relevant experience may also be considered.

Responsibility: Independently manages endpoint and cloud security systems, leads data protection initiatives, investigates security incidents, and contributes to threat intelligence monitoring and policy development.

Experience: Minimum of 6 years in designing and managing cybersecurity systems, implementing secure cloud strategies, developing data protection measures, and proactively using threat intelligence.

Equivalent

Experience:

Minimum of 10 years of relevant experience may also be considered.

Responsibility: Leads projects for the implementation of advanced cybersecurity tools and solutions, focusing on cloud security for Microsoft Azure and Microsoft 365. Investigates complex incidents, analyzes threat intelligence, and develops detailed policies and standards. Provides technical expertise across the IT function.

Experience: Minimum of 8 years in architecting and managing cybersecurity tools, implementing secure cloud strategies, overseeing enterprise-wide data protection measures, and leading incident response efforts.

Equivalent

Experience:

Minimum of 12 years of relevant experience may also be considered.

Responsibility: Oversees major projects involving cybersecurity architecture, cloud security tool implementation, and compliance strategies. Provides leadership in incident response, threat intelligence integration, and enterprise security policy development.

• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Microsoft Certified:
  Azure Security Engineer Associate
• Microsoft Certified:
  Cybersecurity Architect Expert
• GIAC Certified Incident Handler (GCIH)
• GIAC Security Essentials Certification (GSEC)
• Certified Ethical Hacker (CEH)
• ITIL Foundation

• Technical Expertise
• Proficiency in endpoint security solutions (e.g., EDR, antivirus, DLP).
• Strong knowledge of cloud security principles, especially for Microsoft 365 and Microsoft Azure.
• Experience with cybersecurity tools such as SIEM platforms, vulnerability management systems, and IDS/IPS tools.
• Familiarity with data encryption, secure storage solutions, and access control mechanisms.
• Understanding of threat intelligence platforms and proactive risk management strategies.
• Security
• In-depth understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and regulatory requirements (e.g., NERC CIP, SOX).
• Expertise in incident response processes and forensic investigation techniques.
• Knowledge of advanced security architectures,…