Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Enhance, oversee, and guide LSAC security policies, procedures, best practices, and the official Security Systems Program

• Take ownership of the design, implementation, and continuous optimization of Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and Azure data sources

• Create and sustain the data classification framework, which includes sensitive information types, trainable classifiers, and sensitivity labels

• Assess, investigate, and resolve DLP alerts and incidents; adjust policies and report on data-handling risk trends

• Manage Microsoft Purview Information Protection, Insider Risk Management, Data Lifecycle Management, Audit, eDiscovery, and AI Data Security Posture Management

• Safeguard LSAC's Microsoft Azure environment, incorporating identity and access management, network security, Key Vault, Defender for Cloud recommendations, and compliance reporting

• Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel or LSAC's SIEM to create detections, dashboards, and automated response playbooks

• Spearhead cybersecurity policies that address emerging threats, AI acceptable usage, data protection, data governance, and compliance

• Conduct IT security inspections, tests, system-level audits, and reviews in support of SOC 2, PCI DSS, financial, and IT audits

• Assess and recommend security products and services

• Monitor and report on intrusion prevention and detection systems, VPNs, firewalls, and cloud security controls

• Execute vulnerability scans and penetration testing while collaborating with groups to mitigate security gaps

• Develop and support automated security analysis tools and queries using KQL and PowerShell

• Offer security consultation to Infrastructure, Executive Staff, and various departments

• Monitor networks and websites to ensure appropriate security procedures, configurations, and signs of compromise are in place

• Advocate for security awareness programs in collaboration with Human Resources

• Engage in information security projects and meetings

• Participate in the Security Incident Response Team and Test Security Task Force

• Respond to security incidents, maintain access-control records, support investigations and root-cause analysis, and implement solutions

• Provide technical guidance and mentorship while serving as an escalation point for complex investigations

• Stay informed about trends and issues in the computer security industry

⛳️ Requirements

• Bachelor's degree in Information Systems, Cybersecurity, or a related discipline

• A minimum of 10 years of IT experience, with over 5 years in IT security, or an equivalent mix of education, training, and experience

• At least 3 years of practical experience securing Microsoft Azure and Microsoft 365 environments is strongly preferred

• Hands-on experience in designing, deploying, and managing Microsoft Purview within an enterprise Microsoft 365 environment

• Experience managing a DLP program from start to finish, including policy design, phased rollout, alert triage, tuning, and user education

• Strong working knowledge of Microsoft Azure security, encompassing Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure networking, Key Vault, Azure Policy, and Microsoft Defender for Cloud

• Familiarity with Microsoft Defender XDR and Microsoft Sentinel or a comparable SIEM

• Proficiency in writing KQL queries is strongly preferred

• Knowledge of network protocols, firewalls, penetration tools, remote access, network operating systems, PC operating systems, vulnerabilities, and network management tools

• Experience with security tools and best practices, Windows-based systems, Tenable Nessus, Microsoft Defender, PowerShell scripting, and other technical platforms and administration

• Solid understanding of TCP/IP and application development, as well as security best practices

• Familiarity with authentication systems, including modern authentication, multi-factor authentication, token-based authentication, and digital certificates (PKI)

• Understanding of encryption, including Microsoft Purview Message Encryption, Azure Key Vault key management, and the protection of data at rest and in transit

• Professional certifications such as Microsoft Certified: Information Security Administrator Associate (SC-401), Azure Security Engineer Associate (SC-500), Cybersecurity Architect Expert (SC-100), CISSP, CISM, or relevant GIAC certifications are strongly preferred

• Exceptional written and verbal communication skills

• Ability to provide technical leadership, mentor team members, and apply project management skills

• Capability to work Monday to Friday during LSAC's standard business hours from 8:30 a.m. to 4:45 p.m. ET, with additional hours as required

🏝️ Benefits

• Consideration for remote work arrangements

• No travel required

• Equal Opportunity Employer

• At-will employment