Enterprise Security Senior Analyst, 1

About Your Role:

Dotdash Meredith is looking for a Enterprise Security Senior Analyst, 1 to join the Enterprise Security team with a demonstrated record of innovative thinking, technical expertise, mentorship and exceptional customer service. This role is responsible for ensuring that the confidentiality, integrity and availability of the organization is not impacted. We are seeking a security professional who understands the technicalities of security operations and incident response. This role will participate in an on-call rotation.

As a highly visible professional within the Security team, you will be responsible for helping to set and support technical direction, managing technical projects, and collaborating with other groups within the organization.

About Your Contributions:

• Investigate suspicious activities, contain and prevent them. Correlate and validate alerts. Contextualize these events within the environment of the business, and coordinate response activities with key staff in real time.

• Investigate security issues and other cybersecurity incidents. Document security incidents and assess the damage caused.

• Create, manage, and resolve tickets, ensuring completion within our departmental SLAs.

• Support regular security assessments of Dotdash Meredith’s platforms and software

• Monitor threat landscape for emerging threats; communicate threat information to the business and help guide mitigation or remediation.

• Understanding of security technologies including Anti-Malware, EDR, Email Security, Web Security, SIEM, IPS/IDS, Firewalls, Threat Intelligence etc.

• Implement and Manage Security Tools.

• Support employee safety, physical security and technical teams by serving as a subject matter expert

• Assist the security team in expanding cybersecurity awareness across the organization through security review and training sessions with internal staff

• Document security standards and guidelines pertaining to application development, configuration and deployment

• Evaluate new technologies, tools, and/or development techniques that impact security

• Participate in security response efforts that will include on-call rotation

About You:

• 4-6+ years’ experience in a security technical role, security operations and incident response experience preferred

• Understands the principle of least privilege and the confidentiality, integrity, and availability triad and will work to enforce those concepts in our environment

• Strong oral and written communication skills

• Ability to maintain security documentation and manuals

• Must have strong analytical and critical-thinking skills

• Knowledge of cloud technologies (AWS, GCP, Azure, etc.)

• Knowledge of OS Security (Linux, Windows, and Mac)

• Knowledge of G-Suite, Google Workspace Administration

• Understanding of compliance (SOC 2, NIST, SOX, PCI) and its influence on security technologies

• Software development or scripting knowledge (Python, Powershell or Bash script)

• Excellent organizational, time management, and communication skills

• Ability to tactfully communicate and achieve results across team boundaries

• Ability to convey a strong presence and professional image

• Ability to work confidently in a highly complex technical environment

• Ability to resolve ambiguity and take decisive action

• Ability to multitask and prioritize work effectively

• Attention to detail

• Ability to work independently and as part of a team