Security Operations Analyst

We’re looking for a security operations analyst to join our growing security team. This position involves monitoring and analyzing the security posture of our IT environment, assisting in the implementation of security measures, auditing compliance with security policies, and contributing to the overall protection of our organization's information assets. The ideal candidate is a quick learner with a passion for cybersecurity and a desire to grow in the field.

ESSENTIAL JOB FUNCTIONS/RESPONSIBILITIES

• Vulnerability Management: Monitor vulnerability scanning tools, triage and prioritize findings based on potential impact and severity, and track remediation through to closure.
• Patch & Configuration Management: Monitor patch compliance and system configuration baselines, identify gaps or deviations, and coordinate remediation with IT and system owners.
• Incident Detection and Response: Acting as Incident Owner to see incidents through the incident response lifecycle to ensure swift mitigation and recovery.
• Ensure compliance: Verify that security policies are properly enforced through vulnerability management, patch management, configuration management, etc.
• Continuous Improvement: Driving the refinement of standard operating procedures, playbooks, and other security operations resources.
• Documentation and Reporting: Maintain meticulous documentation of findings, remediation efforts, analysis, and lessons learned; produce regular reports
• Partner with team members to ensure data is protected from unauthorized internal and external access, modification, or disclosure
• Partner with IT staff members to provide technical security guidance and recommendations
• Support activities to foster information security awareness within the organization
• Performs other related duties and activities as required.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

QUALIFICATIONS/REQUIREMENTS

Education and Work Experience:

• Bachelor's Degree in Computer Science, MIS, Information Security or related technical field or equivalent technical capabilities

Specialized Knowledge, Skills, and/or Abilities:

• Basic knowledge and understanding of: standard security operations tools such as vulnerability management and patch management, local area networks and firewalls, Active Directory, group policy objects, scripting, encryption, web filtering, exploits and hacker techniques, and, network and operating system security principles.
• Professional scripting experience: Python, PowerShell, or similar
• Professional experience applying cyber security fundamentals and concepts
• Experienced in installing security software and documenting security issues
• Excellent written and oral communication skills
• Desire and drive to learn, grow and develop key cyber skills and competencies
• (Preferred) Basic knowledge of IAM/IDPs and PAM
• (Preferred) Experience with AWS and/or Azure
• (Preferred) Experience with Windows, Mac OS, Unix/Linux operating systems

Other Requirements:

• Travel: 0%
• Special Work Hours: On-call rotation for incident response

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.