Security Monitoring Analyst

The IT Security Analyst is expected to be fully aware of the company s security framework and roadmap goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals. Responsibilities

Participate in the planning and design of corporate security architecture

Demonstrate foresight in recognizing potential or existing security issues, vulnerabilities, and threats and work with cross-functional teams to implement remediation

Recommend additional security solutions or enhancements to current security solutions to improve overall enterprise security

Perform the deployment, integration, and initial configuration of all new security solutions and any enhancements to existing security solutions following standard best operating procedures generically and the enterprise s security documents specifically

Participate in the creation of corporate security documents (policies, standards, baselines, guidelines, and procedures)

Participate in the planning and design of the corporate Business Continuity Plan and Disaster Recovery Plan

Stay up-to-date on the latest security intelligence, including hackers methodologies, in order to anticipate security breaches

Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they are under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.)

Tune security events and correlation from applicable security products and sources

Perform network traffic analysis, host behavior analysis, PC forensics, kill chain, windows event analysis, etc. to effectively detect and protect company assets

Produce a monthly security operations dashboard with key performance indicators (incidents, metrics, security threats, intelligence, etc.)

Requirements

• Bachelor s degree in Information Technology or Information Security or substantial work experience required
• Must have 3 years of hands-on working knowledge of various security technologies (PAN or Cisco Firewalls and VPN, NAC, Endpoint Protection Platforms, File Integrity Management, IPS/IDS, Application Firewalls, Vulnerability Scanner, Web Proxy, Content Filtering, MFA, SIEM Logging & Monitoring, and DLP)
• 3 years of hands-on experience in incident management with critical incident and security event response
• Good working experience implementing network and host security policies
• Good working knowledge of cloud and email infrastructure security
• Ability to work and lead on multiple projects simultaneously
• Strong understanding of IP, TCP/IP, and other network administration protocols
• Excellent interpersonal skills and ability to communicate on all levels with management and all end-users