The IT Security Analyst is responsible for the management, detection, and analysis that enables incident response and security operations. This role involves developing and maintaining threat monitoring capabilities used by the security team. Additionally, the role includes performing penetration testing activities to identify vulnerabilities within the organization's systems and networks. The position requires experience analyzing malware and other related cyber threats while implementing and maintaining security and analysis solutions for a large organization, with knowledge of large-scale threat analysis of event data from commercial and open-source infrastructure technology platforms.

Additionally, the role involves leveraging foundational networking knowledge to assist in threat hunting and network traffic analysis, fostering a hybrid skill set bridging security and networking. Candidates with an interest in both cybersecurity and networking will find this position an excellent opportunity to enhance their skills and gain practical experience across both domains.

 

This is meant to be a general description of the most essential functions of this role.  Other duties may be assigned.   

Conducts detailed security event analysis from network traffic attributes and host-based attributes to identify information security incidents. The Analyst must be competent to work at a technical level, be capable of identifying threats and vectors that cause security events and be able to follow defined procedures for mitigating said threats. Participates in detecting, investigating, and resolving security events. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Responds to alerts coming through SIEM or various security tools. Monitors, analyzes, and investigates security alerts and escalates incidents if necessary. Participates in continuous quality improvement, making recommendations for the development of Information Technology processes and procedures. Assist with basic network troubleshooting and configuration to support secure network operations and improve incident investigation. Supports firewall rule analysis and reviews to identify potential misconfigurations and vulnerabilities. Work with team to monitor and secure cloud-based network environments, ensuring compliance with security standards. Conduct audits of network configurations and firewall rules to identify potential vulnerabilities and misconfigurations.