Information Security Analyst

Business Unit Overview:

Working as Full-Time Information Security Analyst you will provide analysis for the purpose of supporting and enhancing the information security posture related to Fastenal's people, processes and technology.

Responsibilities:

The duties and responsibilities of this position include, but are not limited to:

• Performing Security Operations and Incident Response monitoring, triaging, investigating, and responding to security alerts and incidents through the full lifecycle (detection, containment, eradication, recovery, and post-incident review) 
• Performing Security Operations and Incident Response across the Microsoft Sentinel and Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps) ecosystem including writing and optimizing KQL analytics rules
• Conducting proactive threat hunting across endpoint, identity, email, and cloud telemetry, and mapping activity according to the MITRE ATT&CK framework
• Performing enrichment, malware/phishing triage, and threat-intelligence correlation to determine scope, impact, and appropriate response actions 
• Documenting investigations and maintaining runbooks/playbooks; supporting automation (SOAR) to improve MTTD and MTTR
• Assisting the IT Governance, Risk, and Compliance (GRC) team to promote and ensure appropriate compliance with the agreed governance/risk framework
• Assisting in performing control framework assessments (PCI-DSS and ISO 27000) and internal/external audit engagements
• Assisting in risk and compliance evaluations of systems and business processes
• Collaborating with business units to provide analysis of security requirements
• Communicating with users and management on potential threats to the information security environment
• Maintaining a comprehensive understanding of PCI Data Security Standard (PCI-DSS)
• Recommending preventative, mitigating, and compensating controls to ensure appropriate level of protection and adherence to the goals of the information security strategy

Required Position Qualifications:

The following skills and qualifications are required for this position:

• Possess a degree in Information Technology, Computer Science and have at least 4 years of relevant experience in the areas of information security and Security Operations Center & Incident Response (SOC/IR)
• Proficiency writing and tuning detection/hunting queries (KQL) and familiarity with the MITRE ATT&CK framework
• Having at least 2 years working experience with Microsoft Defender Extended Detection and Response (Endpoint, Identity, O365 & Cloud)
• Prior work experience implementing security standards and procedures
• Working knowledge of a broad range of security technologies, including NextGen Firewalls, Endpoint Protection/EDR, DLP, IDS/IPS, SIEM, Endpoint Protection/EDR, Anti-malware, and Vulnerability management
• Excellent written and oral communication skills
• Highly motivated, self-directed and customer service oriented
• Demonstrate strong organization, planning and prioritizing abilities
• Exhibit strong problem solving, deductive reasoning and decision-making skills
• Demonstrate strong math aptitude, attention to detail and sense of urgency
• Work independently as well as in a team environment
• Demonstrate our core values of ambition, innovation, integrity and teamwork

Preferred Position Qualifications:

• Possess professional IT Security Certification (Microsoft Security Operations Analyst (SC-200), CompTIA CySA+, GCIH, CEH, CCNA Security)
• Hands-on experience with Microsoft Sentinel, Proof Point, Cisco Umbrella, Cisco DUO, Microsoft Azure Cloud Security, Microsoft Purview
• Prior experience implementing security standards and procedures
• Demonstrate knowledge of computer operating systems (RedHat Linux, Microsoft Windows) and, virtualization technologies (VMware, Hyper-V)
• Demonstrate knowledge of networking topology concepts
• Previous scripting experience (Bash, PowerShell, Python, or others)