JOB DESCRIPTION
Summary:
We’re hiring an Information Security Specialist to undertake various security related tasks within our rapidly developing company. Some responsibilities could include; monitoring company networks, deploying security software, documenting security issues or breaches, patching systems, or operating enterprise security software. In order to perform this role, a bachelor’s degree in computer science and experience within the information security field is required.
Information Security Analyst Responsibilities:
-
Monitor computer networks for security issues.
-
Identify, document, assess impact, and respond to security breaches and other cyber security incidents.
-
Implement security measures to protect systems and information infrastructure, including firewalls and data encryption programs.
-
Work with the security team to perform system, application, and network tests
-
Fix detected vulnerabilities to maintain a high-security standard.
-
Stay up-to-date on information technology trends, security standards, and zero-day exploits.
-
Develop, communicate, and improve upon current company-wide policies and procedures regarding best practices for IT security.
-
Perform advanced analysis tasks across endpoints, servers, and network infrastructure
-
Perform internal and external penetration tests
-
Perform vulnerability scans
-
Communicate recommendations and guidelines based on results of assessments
-
Conduct research on emerging security technologies, trends, techniques, and best practices, and sharing findings with management.
-
Provide overall guidance, instruction, and leadership to associates
-
Knowledge of Linux and Windows based server operating systems.
-
Ability learn and operate in a dynamic fast paced environment
Information Security Analyst Requirements:
-
Bachelor’s degree in Computer Science, Information Security, Information Systems, Engineering, or a related field.
-
Experience in information security or related fields.
-
Experience with computer network penetration testing, tools, and techniques.
-
Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
-
Ability to detect, report, and mitigate network vulnerabilities, which includes the ability to communicate an effective strategy to avoid future incidents.
-
Understanding of patch management, along with the ability to deploy patches in a timely manner while understanding business impact.