Information Security Analyst

Position Summary

• Information Security Analyst provides overall mentoring and monitoring of internal and external application development and data management security practices. Responsible for ensuring the confidentiality, integrity, and availability of computer systems, data, and network resources; working with both internal and external development teams in an effort to validate that both new and existing architectures and applications adhere to industry best practice and [Company] Design for Security standards. This position will work closely with the appropriate stakeholders in identifying risks and determining the appropriate application security solutions in internal / external application developers, as well as security assessments for 3rd party application providers.

Minimum Qualifications:

• Bachelor’s Degree in Computer Science, Management Information Systems, Engineering, Mathematics or other related field
• Typically requires a minimum of 5 years of related experience
• Available to work on call during evenings, weekends, and holidays

Desired Qualifications:

• At least 3 years of experience translating technical data into business impact information and experience analyzing and troubleshooting various IT Security technologies.
• At least 3 years of experience managing multiple tasks/projects simultaneously and meeting established deadlines.
• At least 3 years of experience with networking and security technologies such as, Internet Protocol Security (IPSEC), Virtual Private Network (VPN), routers, switches, firewalls, intrusion detection/prevention, data leakage, Web Application Firewall (WAF).
• Experience communicating conceptual and technical information both verbally (on phone, one-on-one, to groups) and in writing (emails, letters, reports, presentations) to various audiences (work group, team, company management, external clients).
• Experience working in a network security environment, such as a Security Operations Center (SOC), Security Incident Response Team (SIRT), or Computer Security Incident Response Center (CSIRC) investigating targeted intrusions through complex global network segments, preferred.

One or more of the following certification designations is preferred:

• GIAC Certified Intrusion Analyst – GCIA
• GIAC Certified Incident Handler - GCIH
• GIAC Certified Forensic Examiner - GCFE
• GIAC Certified Forensic Analyst - GCFA
• Certified Information Systems Security Professional - CISSP
• Other Technical Certifications considered
• U.S. Government Security Clearance, and/or capability to obtain clearance, preferred