Security Analyst (6810 Advanced)

INTERVIEW= Onsite / Virtual
JOB TYPE= Onsite
Description:
Develops and manages security for more than one IT functional area (e.g., data, systems, network and/or Web) across the enterprise. Assists in the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures and use of firewalls and encryption routines). Prepares status reports on security matters to develop security risk analysis scenarios and response procedures. Responsible for the tracking and monitoring of software viruses. Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.
Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness. Provides direct support to the business and IT staff for security related issues. Educates IT and the business about security policies and consults on security issues regarding user built/managed systems. Represents the security needs of the organization by providing expertise and assistance in all IT projects with regard to security issues. Must have extensive knowledge in networking, databases, systems and/or Web operations. Involved in developing enterprise security strategies, management of security projects and the most complicated security issues.
Responsibilities:

• Monitoring and Protection: Continuously monitor security access and system logs, manage firewalls, and install security software to prevent data breaches.
• Incident Response: Investigate, analyze, and contain security breaches or malicious activity
• Risk Management: Conduct vulnerability scans, risk assessments, and penetration tests to identify potential security gaps.
• Policy and Compliance: Develop, document, and enforce security policies, procedures, and standards (e.g., NIST, ISO).
• Threat Intelligence: Research emerging threats and security trends to proactively improve defense strategies.
• Security Training: Train employees on security awareness and best practices to reduce human error.

Qualifications:

• Bachelor's Degree in Computer Science, Information Systems, or other related field. Or equivalent work experience.
• A minimum of 4 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration
• 2 years of experience with information security.

Proficiency in network protocols, operating systems (Windows, Linux), security tools, and scripting languages