Job Description
Job Description
Cybersecurity Analyst
About the Role
Join a hands-on, onsite cybersecurity team that protects the company’s systems and data around the clock (24/7 support). You’ll detect, respond to, and report cyber threats, help manage the security infrastructure, and make sure our processes follow the NIST Cybersecurity Framework and other regulatory requirements. You’ll also lead security projects, support employee security training, and work closely with IT and business teams.
What You’ll Do
Threat Monitoring and Response
- Proactively monitor the environment to detect and stop cyber attacks before they happen
- Track new and emerging cyber threats
- Investigate and respond to real-time security alerts on your own
- Review real-time and historical reports for security or compliance violations
- Review system audit logs and logs from other security tools
- Work with Security Operations Center (SOC) analysts and management to triage and respond to alerts
- Coordinate with the Incident Response Team to assess, contain, and eliminate threats
- Fine-tune security controls to improve accuracy and reduce false positives
- Manage threat lists, such as whitelists and blacklists
- Report critical incidents and security needs to senior cybersecurity staff and IT management
Vulnerability Management
- Help run the Vulnerability Management Program and analyze issues quickly and accurately
- Make sure vulnerabilities are fixed according to established plans
- Run internal vulnerability and penetration testing tools as directed
- Research and recommend security patches for firmware, operating systems, and software
- Evaluate the security impact of software changes
- Monitor vulnerability and threat services and recommend responses and countermeasures
Security Awareness and Data Protection
- Develop and run Security Awareness activities and training for employees and external customers
- Research scenarios and write messaging for the Employee Security Awareness program
- Work with business units and end users to create and improve Data Loss Prevention (DLP) rules
Planning, Policy, and Projects
- Write or review incident response plans and runbooks, and create or verify automation for them
- Recommend updates to IT security policies and procedures
- Research and recommend third-party security vendors
- Help plan and run tabletop cybersecurity exercises for all business units
- Administer, monitor, and maintain security infrastructure and assigned program components
- Provide technical guidance on information security initiatives
- Lead security projects and provide excellent customer service
- Other related duties as required
What You’ll Need
Required
- High school diploma or equivalent
- 3+ years of experience in IT, IT security, or cybersecurity
Preferred
- 1+ year of cybersecurity experience
- Experience collecting, analyzing, and reporting on security incidents
- Hands-on experience with security tools: endpoint protection, vulnerability and patch management, desktop management, mobile security, and alerting and monitoring tools
- Security+ and/or Network+ certification
Technical Skills
- Understanding of computer networking (TCP/IP)
- Hands-on experience supporting Windows and Linux systems
- Knowledge of cyber threats, vulnerabilities, and attacker tactics, techniques, and procedures
- Scripting experience in PowerShell or Python (a plus)
- Advanced Microsoft Office skills for data analysis and reporting
What Makes You Successful
- Trustworthy, with strong integrity and emotional maturity
- Takes ownership and works with urgency and discipline
- Strong analytical and problem-solving skills
- Able to explain complex information clearly, in writing and in person, including presentations
- Organized, detail-oriented, and good at managing time across multiple projects
- Works well independently with sound judgment, and collaborates well with people at all levels
- Handles confidential information professionally
- Self-starter with a high degree of initiative
Physical Requirements and Travel
This role may involve standing, walking, bending, pushing and pulling, grasping, lifting, reaching, stooping, crouching, color determination, typing, sitting, reading, speaking, and listening. Occasional travel between company offices is required.
Benefits
- Medical, dental, and vision plans, with the company paying 85% of monthly premiums for employees and eligible dependents
- Paid vacation and sick time, plus 12 paid holidays per year
- 401(k) and Defined Contribution Profit Sharing retirement plans
- Life, AD&D, and LTD insurance
- Health savings account and flexible spending plans