CYBER/INFORMATION SECURITY ANALYST

GENERAL STATEMENT OF JOB

The Cyber Security Analyst is tasked with proactively safeguarding the organization's information assets and infrastructure against evolving cyber threats. This position involves advanced threat hunting, vulnerability management, security architecture design, and incident response. The analyst will leverage deep networking expertise and a thorough understanding of modern cybersecurity principles to implement robust security measures, ensure regulatory compliance, and continuously improve the organization's security posture.

SPECIFIC DUTIES AND RESPONSIBILITIES

Essential Functions:

• Identify, analyze, and mitigate security risks and threats.
• Conduct advanced threat hunting to identify and neutralize sophisticated threats using SIEM, EDR, and other tools.
• Perform vulnerability assessments and penetration testing to remediate security weaknesses.
• Design and maintain secure network architectures, including firewalls, IDS/IPS, and VPNs.
• Apply strong networking knowledge (TCP/IP, routing, switching) to enhance security.
• Manage and maintain an up-to-date inventory of all devices, including servers, workstations, and related network devices, ensuring assets are secure and compliant.
• Utilize SQL to query, analyze, troubleshoot, and manage databases, including supporting database maintenance, backups, access controls, and performance optimization.
• Designs security policies, programs, or practices to ensure adequate security relating to asset protection, alarm response, access card use, and other security needs. 
• Coordinate meetings with stakeholders and vendors to discuss security strategies, review audits, and plan security reviews and improvements.
• Develop and maintain security policies and procedures, to ensure a secure and resilient IT infrastructure.
• Develop and lead security awareness training initiatives for employees, emphasizing the importance of security best practices and how to recognize and prevent potential threats.
• Participate in planning and executing disaster recovery and business continuity plans, ensuring the availability and integrity of critical systems and databases in the event of a cyber incident.

MINIMUM EDUCATION AND TRAINING

• Bachelor's degree in Computer Science, Information Security, or a related field
• Minimum of five (5) years of progressive experience in cybersecurity, with a focus on threat hunting, incident response, and network security.
• Possess or be able to obtain CompTIA Security+ and Network+ certifications. CompTIA CySA+ certification is preferred.
• An equivalent combination of education and experience with provide the requisite knowledge , skills, and abilities for the job will be considered.

 
MINIMUM QUALIFICATIONS AND STANDARDS REQUIRED

Knowledge, Skills, and Abilities:

• Experience with SQL and scripting languages (Python, PowerShell, etc.) is a plus.
• Advanced knowledge of cybersecurity principles, frameworks, and best practices.
• Expertise in threat-hunting methodologies, techniques, and tools (e.g., SIEM, EDR, threat intelligence platforms).
• Strong understanding of network security principles, protocols, and technologies.
• Proficiency in vulnerability management, penetration testing, and security assessment tools.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team.   
• Experience with cloud security (AWS, Azure, GCP) is preferred 

Physical Requirements:

This role involves moderate physical activity, including occasional movement through data centers and secure facilities that may require lifting objects of moderate weight (up to 20 pounds). The position may involve working in diverse conditions, including exposure to controlled environments (e.g., data centers with variable climates, electrical hazards, and other physical factors). Occasional travel may be required.