Information Security Analyst, Level I

This is a fully remote position, open to applicants in United States.

📋 Description

• Deploy, integrate, and set up new security solutions, as well as enhance existing ones.

• Stay updated on cybersecurity products, processes, attacks, and threat vectors.

• Suggest additional security solutions or enhancements to bolster enterprise security.

• Assess cloud, on-premises, and end-user system configurations and propose security enhancements.

• Oversee the operation of existing security solutions to ensure they function efficiently and effectively.

• Analyze and interpret logs and reports from security tools, workstations, servers, and network devices.

• Address tickets related to security issues, vulnerabilities, and end-user concerns.

• Engage in investigations of suspicious activities.

• Take part in vulnerability assessments, penetration tests, and security audits.

• Uphold secure configuration baselines using frameworks like CIS and CSA.

• Ensure operational configurations align with established baselines and industry best practices.

• Provide on-call support for end users regarding security solutions.

• Collaborate with AppDev to identify and resolve application vulnerabilities.

• Contribute to the planning and design of enterprise security architecture.

• Assist in the creation of enterprise security policies, standards, baselines, guidelines, and procedures.

• Participate in formulating business continuity and disaster recovery plans.

• Execute additional responsibilities as assigned.

⛳️ Requirements

• Demonstrated analytical, troubleshooting, and problem-solving skills.

• Ability to prioritize and execute tasks effectively in a high-pressure environment.

• Strong written, verbal, and interpersonal communication abilities.

• Capability to research IT security issues and products.

• Skill in presenting ideas in a business-friendly and user-friendly manner.

• Highly motivated and self-directed.

• Strong attention to detail.

• Team-oriented with proficiency in collaborative environments.

• Familiarity with cloud security principles and best practices.

• Experience with AWS IAM, infrastructure, security services, logging, and other serverless services.

• Knowledge of AWS Security Hub.

• Experience in implementing security controls and configurations for AWS, Azure, GCP, Microsoft AD, and Linux.

• Working technical expertise in cloud and SaaS security solutions and tools.

• Familiarity with DevSecOps, Application Security, or secure software development lifecycle methodologies.

• Some scripting knowledge in bash or Python.

• Understanding of threat modeling methodologies.

• General knowledge of NIST, CIS, CSA, and ISO27000 security frameworks and controls.

• Some experience with security systems and tools, including Firewalls, WAF, SIEM, SOAR, MDR, IAM, PAM/PIM, network packet sniffers, Nmap, IDS/IPS, vulnerability management tools, SAST/DAST, and Burp Suite.

• Some familiarity with encryption, antivirus/malware, penetration testing, and source code scanning.

• Basic understanding of IP, TCP/IP, and other network administration protocols.

• College diploma or university degree in Cybersecurity or a related computer technology field, along with two years of equivalent work experience.

• One or more of the following certifications: AWS Certified Associate level certification, AWS Certified Security - Specialty, GIAC Cloud Security Essentials (GCLD), CompTIA Security+, or GIAC Security Essentials (GSEC).

• Over 2 years of technical experience in cloud, application, infrastructure, and/or network security.

• At least 1 year of experience with AWS.

• A minimum of 1 year of experience with cloud-based security technologies.

• A minimum of 1 year of experience with Linux operating systems.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Supplemental income insurance

• Employer-paid disability insurance

• Employer-paid life insurance

• Pre-tax FSA for medical and dependent care

• 401K