Security Analyst I ( remote )

View full description

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Relevant certifications (e.g., CISSP, CISM, GIAC) are highly desirable.
• Proven experience working as a Security Analyst or in a similar role, preferably in a large enterprise environment.
• Strong knowledge of information security principles, frameworks, and best practices (e.g., NIST Cybersecurity Framework, OWASP, CIS Controls).
• Experience with security assessment methodologies, tools, and techniques, including vulnerability scanning, penetration testing, and risk assessments.
• Familiarity with security monitoring tools, SIEM solutions, and log analysis.
• Solid understanding of network protocols, firewalls, intrusion detection/prevention systems, and other security technologies.
• Knowledge of cloud security concepts and technologies (e.g., AWS, Azure, GCP) is a plus.
• Excellent analytical and problem-solving skills, with the ability to think critically and make sound decisions under pressure.
• Strong communication skills to convey complex security concepts to both technical and non-technical stakeholders.
• Demonstrated ability to work independently and collaboratively in a team environment.
• Strong attention to detail and a commitment to maintaining high standards of data integrity and security.

Responsibilities:

• Identify and assess security risks through comprehensive security assessments to identify vulnerabilities and threats.
• Monitor security events, investigate incidents, and respond to breaches or threats. Analyze security logs for indicators of compromise.
• Perform vulnerability assessments and penetration testing to identify weaknesses. Collaborate to remediate vulnerabilities.
• Utilize security information and event management (SIEM) tools to monitor and analyze security events. Respond to and prevent future incidents.
• Develop and maintain security policies, procedures ensuring compliance with regulations and industry standards.
• Deliver security awareness training to educate employees on data protection and incident reporting.
• Prepare reports on security findings, communicate recommendations and updates to stakeholders.