Security Analyst

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Investigate and address potential threats to Information Systems utilizing security monitoring and vulnerability assessment findings.

• Conduct malware remediation for endpoints, applications, and servers, including root-cause analysis of security incidents.

• Assist in the management of security systems, projects, policies, practices, and standards.

• Assess new security technologies for potential replacement, enhancement, or integration with IT systems.

• Monitor and address daily security incident alerts.

• Maintain professional skills, certifications, and competencies.

• Ensure compliance with policies and procedures and implement corrective actions for any non-conformities.

• Support endpoint security risk and vulnerability assessments along with remediation efforts.

• Oversee daily operations through a service desk ticketing system.

• Explore improved methods for mitigating security risks through emerging technologies and solutions.

• Collaborate with security monitoring, forensic analysis, internet filtering, Active Directory management, IPS/IDS, antivirus, and data loss prevention technologies.

• Proactively uphold the overall Cybersecurity Program alongside the IT Management Team.

• Collaborate on projects with IT and business teams.

• Enhance information security awareness by participating in corporate training initiatives.

• Contribute to monthly security metric reporting.

• Provide timely verbal and written status updates to team members and management.

• Execute other designated security responsibilities.

⛳️ Requirements

• Two to four years of experience with organizations that have effectively utilized IT as a lever for optimization and change.

• IT Security Certification and/or prior experience in a global security and compliance team is mandatory.

• Prior work experience in a highly regulated sector is required.

• A Bachelor’s degree in Math or Computer Science is essential.

• A minimum of 3 years of IT experience is necessary.

• Familiarity with attack vectors, current threats, and remediation strategies is important.

• Knowledge of control frameworks and reference architectures such as NIST and the Cyber Security Kill Chain is expected.

• Understanding of TCP/IP networking and the OSI 7-layer model is required.

• Proficient knowledge of Windows operating systems and products, UNIX, Linux, and cloud-based systems is necessary.

• Strong analytical, problem-solving, and attention-to-detail skills are essential.

• Ability to provide IT security guidance relevant to others’ job functions.

• Excellent verbal and written communication, organizational, teamwork, and interpersonal skills are crucial.

• Capability to multitask in a fast-paced environment is required.

• Demonstrated professionalism, judgment, discretion, tact, and diplomacy are vital.

• Ability to work independently under consultative direction is necessary.

• May require occasional travel to local plant and facility sites.

• Some travel may be needed to engage with clients, stakeholders, or off-site personnel/management.

• Occasional off-hours work may be necessary.

• Participation in an on-call rotation is required.

• U.S. applicants must possess legal authorization to work in the United States without company sponsorship.

• For applicable export-controlled positions, must be a U.S. Person under ITAR or eligible for approval for a U.S. Government export license.

🏝️ Benefits

• Equal opportunity employment.

• Reasonable accommodations provided for applicants.

• State-of-the-art equipment and innovative projects.

• Opportunities for career growth.

• An innovation-focused work environment.