Cybersecurity Analyst

Position Overview

The Cybersecurity Analyst is a hands on technical role responsible for helping design implement and operate key components of the Firms cybersecurity this position you will actively work with security technologies to research test deploy monitor and maintain controls that protect the Firms systems networks and data. You will investigate security alerts analyze risks remediate findings and support incident response efforts to safeguard the Firms digital assets.

This role is well suited for a security professional who enjoys working directly with tools and technologies while collaborating closely with a security team. The Cybersecurity Analyst reports to the Director of Information Security and contributes directly to the execution and continuous improvement of the Firms Information Security Management System (ISMS) and overall security strategy.

This position is a flexible hybrid position with mandatory of 3 days a week in office.

Responsibilities

Essential Functions

• Assist in the design implementation and ongoing monitoring of security systems and controls.
• Proactively identify vulnerabilities in hardware software applications and configurations and remediate findings.
• Support the planning and execution of security initiatives upgrades and improvements.
• Monitor systems networks and data for suspicious activity anomalies and potential threats.
• Respond to security incidents coordinate investigations and perform root cause analysis.
• Collaborate closely with the cybersecurity team and Security Operations Center (SOC) to ensure continuous protection.
• Report security incidents risks and improvement recommendations to the Director of Information Security.
• Maintain and monitor security controls to protect systems networks and sensitive data.
• Administer and maintain the cybersecurity awareness training program.
• Ensure security protocols and processes align with SOC 2 Type II and other compliance requirements.
• Interpret penetration test and vulnerability assessment results and drive timely remediation.
• Develop document and maintain standard operating procedures (SOPs) and process improvement initiatives aligned to the security roadmap.
• Design deploy and optimize security updates and endpoint management processes using SCCM and Intune.
• Assist with maintaining endpoint systems to ensure operating systems and applications are current and supported.
• Automate routine administrative and security tasks using scripting and automation tools.
• Continuously evaluate and improve information security technologies techniques and processes.

Qualifications

Education

• BS/BA Degree in Cybersecurity / Information Technology or related field
• Knowledge of vulnerability management tools technologies and methods
• Industry professional certifications are a plus (Security SSCP CISSP)

Experience

• Minimum of 3 years of experience in Information Security or a related technology field.

• Hands-on experience with endpoint protection technologies including anti virus and intrusion detection systems.
• Experience managing and supporting firewalls (Palo Alto preferred).
• Proven experience maintaining secure network system and application architectures.
• Strong experience with Microsoft 365 administration and security controls.
• Working knowledge of vulnerability management platforms (e.g. Tenable Qualys).
• Experience administering email and web security gateways.
• Experience with SIEM platforms for log review monitoring and security incident detection.
• Familiarity with AWS cloud security concepts and controls (preferred).
• Experience collaborating with Managed Service Providers (MSPs) to drive security initiatives to completion.

Skills

• Strong ability to clearly communicate network and security issues to both technical peers and management.
• Excellent interpersonal verbal and written communication skills.
• Demonstrated ability to manage vendor relationships and coordinate deliverables.
• Ability to prioritize respond to and follow through on multiple requests in a fast paced dynamic environment.
• Proven ability to work independently and lead projects through successful completion.
• Proficiency in PowerShell scripting for automation and administrative tasks.