Information Security Analyst

Department - Information Security

Information Security Analyst - Responsibilities

Security Operations - 75%

Perform day-to-day information security analysis, supporting the information security manager by responding to alerts, events, vulnerabilities, and threats, and conducting threat hunting and log analysis

Demonstrate proficiency with a variety of IT security tools, including endpoint protection, IAM, SIEM, SOC portal/alerts, and threat intelligence services

Support security engineers with operational tasks such as alert review, rule tuning, and responding to helpdesk tickets escalated to IT Security

Create security-related reports and dashboards, such as vulnerability management tracking, based on guidance from management, to help the security manager and broader IT management team make informed decisions

Prepare and present metrics, such as security tool efficiency, in a clear and organized format for information security leadership

Build and maintain partnerships across all levels of the organization, ensuring collaboration on system changes and enhancements

Vulnerability Management - 25%

Partner with the information security team to track vulnerabilities, notify the team of threats, and help identify compensating controls

Track and report on vulnerability exceptions

Assist with risk assessments

Collect, analyze, summarize, and report on vulnerability management data; track vulnerability remediations with system owners

Job Requirement

Familiarity with basic security tools and concepts such as SIEM, endpoint protection, identity and access management, cloud security, threat and vulnerability management, and incident response

Critical thinking with a drive for process improvement

Work cross-functionally with all layers of the organization and possess strong verbal, written, presentation and communication skills

Proficient with Microsoft Excel, Word, and PowerPoint

Ability to work in highly collaborative and fast-paced environment

Effectively communicate verbally and in writing with information security vendors including the managed security operations center

Basic programming or scripting experience preferred

Prior Work Experience and Educational Requirements

3 years experience required for general information security; including reporting and analysis

1 year experience required for security tools such as EDR, SIEM and secure email gateway

Preferred - Bachelor s degree in an appropriate field