Analyst, Cyber Security

As a Cyber Security Analyst, you will be integral in safeguarding our information systems, ensuring the security of sensitive data, and maintaining its confidentiality, integrity, and availability.

Responsibilities

• Collaborating closely with the IS Team, your role involves identifying and addressing security vulnerabilities, responding to security incidents, and fortifying our overall security stance.
• Security Monitoring and Incident Response: Collaborate on monitoring network traffic and security alerts to detect potential threats.
• Investigate and promptly respond to security incidents, breaches, and vulnerabilities.
• Implement effective incident response procedures to minimize damage and recovery time.
• Perform regular vulnerability assessments and penetration testing using vendor or third-party tools.
• Evaluate security controls and propose enhancements to mitigate risks effectively.
• Contribute to developing security policies and procedures in adherence to industry standards and regulations.
• Educate staff on security best practices and maintain ongoing security awareness programs.
• Collaborate on managing and configuring security tools like firewalls, intrusion detection systems, and antivirus software.
• Ensure proper functioning and configuration of systems, staying updated on the latest security threats and technologies.
• Assist in preparations and participation in security audits to ensure compliance.
• Ensure adherence to data protection laws, HIPAA, state or local regulations, and internal policies.
• Maintain comprehensive records of security incidents and actions taken.
• Prepare management reports on security incidents, risks, and compliance status.
• Stay informed about emerging threats and trends while supporting employee training on security best practices.
• Foster a security-conscious culture within the organization.

Requirements

• Bachelor’s degree in computer science, Information Technology, or related field (or equivalent work experience).
• Strong written and verbal communication skills.
• Proactive and able to work under pressure, occasionally requiring after-hour and weekend availability.

Preferred

• Preferred but not required certifications: CompTIA Security +, Certified Ethical Hacker (CEH), System Security Certified Practitioner (SSCP).
• 2-4 years of cyber security experience.
• Understanding of HIPAA and PCI DSS regulations.
• Strong knowledge of security technologies, protocols, and best practices.
• Proficiency in security tools and software.
• Excellent problem-solving and critical-thinking skills.
• Ability to work well independently and in a team.
• Detail-oriented with a commitment to top-notch security standards.
• Comfortable in a fast-paced, customer-focused, start-up culture environment with evolving processes, adaptable to changing business demands.