Sr Analyst Cyber Security

Who We Are

At Academy Sports + Outdoors our vision is to be the best sports + outdoors retailer in the country - but what truly sets us apart is our people. We're a passionate, purpose-driven team that's as committed to each other as we are to our customers.

We've spent over 80 years building a culture that puts people first. We believe in creating opportunities for growth, fostering meaningful connections, and supporting every Team Member's journey. What fuels us? Our belief in the power of fun.

Here, you won't just help customers gear up for their next adventure - you'll launch one of your own. Whether you're starting out or leveling up, Academy is a place where fun can't lose!

What You Will Work On

In this role, you protect enterprise technology by supporting vulnerability management, advanced threat analysis, and security controls across the organization. Your work helps identify and reduce security risk while maintaining coverage for enterprise systems, applications, endpoints, and cloud environments. You also serve as an IT security subject matter expert for business and IT projects and initiatives, helping teams understand and address security needs.

Day to day, you support vulnerability remediation, complete assigned IT tickets, perform application security reviews for web and mobile applications, and implement and manage security controls. You provide security recommendations for public cloud initiatives, participate as a key resource in CSIRT activities and investigations, and collaborate with IT Security and Compliance to deliver holistic solutions. You also present solutions to various levels of management.

Who You Will Work With

Working across the enterprise, you collaborate with the IT Security and Compliance team, business partners, IT project teams, support teams, development teams, and management. You coordinate security recommendations and remediation activities while translating technical information for non-technical audiences.

You will also work with teams managing applications, operating systems, endpoints, identity services, networks, databases, virtualization, servers, and cloud platforms. The role may include collaboration with offshore teams.

What You Bring

Bring your energy, your ideas, and your love for sports and the outdoors.

• Bachelor's degree in Information Technology or a relevant field preferred
• 5+ years of experience working in information security in an enterprise environment
• Experience conducting security assessments and analysis of applications and operating systems
• Experience providing cyber threat analysis to support and development teams
• Experience with application support and system troubleshooting preferred
• Experience collaborating with various levels of IT and management
• Working experience with different types of Single Sign-On, password reset, self-service, federated identity, multi-factor authentication, and IAM products and services, including Identity as a Service
• Experience with offshore teams preferred
• Industry certifications in areas such as AWS, Certified Cloud Architect, Certificate of Cloud Security Knowledge, CISSP, CEH, CCNA, and CompTIA Cloud+ preferred
• Expert knowledge of Windows, Mac, Linux/Unix, and iSeries AS400 operating systems
• Deep understanding of analyzing and prioritizing application security, risk assessment, validation of security penetration test results, and vulnerability resolution
• Expert knowledge of database, networking, virtualization, and server hardware concepts
• Master skills in endpoint security, threat management, and cybersecurity incident response
• Demonstrated expert-level experience with endpoint protection and vulnerability management tools, malware prevention tools, and antivirus solutions
• Demonstrated experience configuring and managing security controls for cloud environments and IaaS, PaaS, and SaaS platforms
• Thorough understanding of network protocols and network traffic analysis, firewalls, intrusion prevention systems, proxies, PKI, and HSMs
• Expert ability to analyze security system logs, security tools, and data
• Ability to document project requirements, define KPIs, and produce reports showing project progress
• Ability to communicate technical information to a non-technical audience
• Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels
• Thorough working knowledge of Windows Server 2003, 2008, 2012, and 2016, Unix, Mac, and Windows 10
• Ability to remain organized, pay attention to detail, and meet critical deadlines
• Analytical approach with strong problem-solving abilities and creative resolution skills
• A team-first attitude; while your core duties are your priority, you're happy to step in wherever you're needed

Work Style and Physical Requirements

• Ability to work with different teams on concurrent projects
• Ability to work well under pressure while consistently meeting time-sensitive deadlines
• Ability to adhere to company work hours, procedures, and rules governing professional staff behavior
• Regular in-office attendance is required
• Acceptable level of hearing and vision to perform job duties
• Ability to adhere to company policies and professional standards

Key Skills

Security Operations Management, Information Assets Protection, Managed Cloud Security Services, Web Application Management, Security

Equal Employment Opportunity

Academy is an Equal Opportunity Employer and does not discriminate with regard to employment opportunities or practices on the basis of race, religion, national origin, sex, age, disability, gender identity, sexual orientation, or any other category protected by law.