Security Analyst Level I

Overview:

Security Analyst 1 is responsible for ensuring the protection of the company's digital assets from unauthorized access. This includes securing both online and on-premises infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches occur. If a breach does occur, security analysts are often on the front line, leading efforts to counter the attack. This position is responsible for generating reports for IT administrators and business managers to evaluate the efficacy of the security policies in place. This position will assist with testing IT General Controls for maintaining Sarbanes Oxley (SOX) compliance. 

Responsibilities:

•             Monitor all DBMG computer networks for security issues and assist infrastructure team in fixing detected vulnerabilities to maintain high-security standards.

•             Audit activities of security administrators on various software applications. Perform internal and external security audits that will allow the business to make decisions on what technology to implement.  Perform operational risk assessment (OSA) process for all organization facilities. 

•             Monitor software to protect systems and information infrastructure, including firewalls, Proxies, SIEM, Antivirus, Intrusion Detection Systems, Intrusion Prevention Systems, and data encryption programs.

•             Investigate security breaches and other cyber security incidents to identify the root cause. Document security breaches and assess the damage they have caused or may cause.

•             Verify the security standards of third-party vendors and collaborate with them to meet security requirements.

•             Stay up-to-date on information technology trends, security standards, and news.

•             Understand information security management.

Qualifications:

Work Experience

3-5 years' experience

 

Education/Training

BS in Computer Science or related field, or equivalent experience

 

Specialized Knowledge – Certificates & Licenses

Specialized Knowledge is required in the following areas:

• Protect digital files and information systems against unauthorized access, modification or destruction
• Maintain data and monitor security access
• Conduct internal and external security and compliance audits
• Monitor network, intrusion detection and prevention systems
• Analyze security breaches and other cybersecurity incidents to determine their root cause
• Document security breaches and assess the damage they cause.
• Work with security team to perform tests and uncover network vulnerabilities.
• Review and maintain corporate security policies
• Audit security awareness training program
• Coordinate security plans with outside vendors
• Information Security Analyst must have a current ISC2 Certified in Cybersecurity, Certification. If they do not have this certification, they will have 6 months to obtain certification

 

Software & Technology

Position will require the frequent use and knowledge of MS Windows 10 and/or MS Windows 11, MS Word, MS Excel, MS PowerPoint, MS Teams, and MS Outlook. Security Analysts are expected to have expertise in Cybersecurity, Firewalls, Network Security, Information Assurance, Security Information and Event Management (SIEM), Application Security, and Security Architecture. They must also keep up with the latest trends in Cybersecurity.