The Information Security Analyst works with a team of cyber security engineers to achieve positive outcomes around the NIST (National Institute of Standards and Technology) core cyber security functions of identify, protect, detect, respond, and recover. Works both independently and collaboratively with project managers/task leads and network, system, and integration engineers to capture and refine information security requirements and ensure that the requirements are integrated into information technology component products and information systems through purposeful security architecting, design, development, and configuration.
Name of the
Organization: KLDiscovery
Requisition
ID: 1065
Positions: Information
Security Analyst
Location: Remote (WFH)
Salary: As per
company Norms
Required
Skills & Qualifications:
- Graduate
- Microsoft Intune
- Microsoft Defender Suite
- Qualys Attack Surface Management
- Skyhigh Secure Web Gateway
- Trellix ePolicy Orchestrator (ePO)
- SolarWinds
- Azure
- Microsoft Exchange
- Palo Alto Panorama
- ManageEngine AD Audit
- Varonis (preferred)
- Clarity Identity Lifecycle Manager (preferred)
- Microsoft Sentinel (preferred)
- Strong analytical and problem-solving skills with excellent attention to detail.
- Knowledge and understanding of security controls across all security domains, such as access management, encryption, vulnerability management, authentication, authorization, network security, physical security, etc preferred.
- Ability to identify security risks in application, system, and network architecture, data flow, and processes or procedures
- Familiarity with security technologies, devices, and countermeasures, as well as the threats they are designed to counter.
- Experience with developing security reports, recommendations, policies, and procedures that are meaningful, defensible, and actionable for a variety of audiences preferred.
- Familiarity with more than one framework (NIST 800-series, ISO 27000-series, PCI DSS and ISO, HIPAA, HITRUST, FISMA, FedRAMP other common security control frameworks) preferred.
- Communication skills (interpersonal, verbal, presentation written, email). Experience to write report segments and to participate in presentations.
- Positive attitude, team player, self-starter; takes initiative, ability to work independently and effectively with all levels of staff and management both internally and externally
- Excellent written, verbal and client-facing communication skills.
- Strong personal and time management skills.
- Outstanding customer service skills.
- Industry certifications desirable - CompTIA Security+, (ISC)² SSCP – Systems Security Certified Practitioner, GIAC Security Essentials (GSEC), etc.
Responsibilities:
- Protect and Defend - Identify, analyze, and mitigate threats to internal information technology systems and/or networks.
- Analyze - Perform highly specialized review and evaluation of incoming cybersecurity information to determine its usefulness for intelligence.
- Collect and Operate - Provide specialized denial and deception operations and collection of cybersecurity information that may be used to develop intelligence.
- Investigate - Investigate cybersecurity events or crimes related to information technology (IT) systems, networks, and digital evidence.
- The Information Security Analyst is accountable for procedures and processes that ensure the integrity, confidentiality and availability of assigned Business units' information, applications and infrastructure.
- The Information Security Analyst will perform routine risk assessments, security audits, and vulnerability scans to identify, evaluate, document, and remediate organization risk, control gaps and vulnerabilities.
- The Information Security Analyst is responsible, with the help of senior staff, for developing security reports, security recommendations, and security policies and procedures that are meaningful, defensible, and actionable for a variety of audiences as pertained to assigned business units.
- Perform log collection, correlation, reviews, archival, retention, and monitoring of automated alerts for items such as, and not limited to:
- IPS/IDS alerts; change detection (FIM) alerts
- Application firewall alerts; malware alerts
- Security system health alerts; exploit attempt alerts
- Participate and be an integral component of audit, compliance, and regulatory functions, including and not limited to:
- Audits of system security to ensure compliance with Corporate security framework ISO 27001, NIST 800-53, and PCI
- Emerging US state and Federal and International privacy laws
- Participate in a vulnerability management program that includes:
- External & internal vulnerability & penetration tests of applications and systems
- Documentation and remediation of identified vulnerabilities and exploits
- Routinely monitoring for security vulnerabilities and security patches
- Taking a risk-based approach comparing those security vulnerabilities and security patches across the operating environments
- Making recommendations to various IT teams on the mitigation process for those identified security vulnerabilities
- Coordinate with business units, operations, and technology teams for incident response, remediation, and improvement
- Acts as the initial point of contact to facilitate the handling of security incidents and requests, conducts technical investigations resulting in successful root cause analysis of intrusions, and make real-time decisions about incidents as they occur
- Maintain documentation that supports the annual Security compliance attestation as it is relevant to the assigned Business units
Benefits:
- Paid time off, that offers various time off options to help employees maintain a work-life balance, such as Casual, Earned, Sick, Special Leave, and Holidays!
- Ongoing learning and development, a focus on continuous professional development through various training and education reimbursement programs.
- A diverse and inclusive workplace where we all learn, grow, and achieve the greatest heights…together.
- A surrounding team of mission-driven individuals who genuinely love what they do.
- Free, fun, interactive and incentivized global wellness program that promotes the wellbeing of our employees.
Apply Link –
Click Here
For Regular
Updates Join our WhatsApp – Click Here
For Regular Updates Join our Telegram – Click Here
0 Comments
Thanks for your comment, Will Reply shortly.