Info Sec Analyst

Info Sec Analyst
Position Description:
Responsible for assisting the Information Security Lead with the technical analysis and reporting on the information security areas including: host, client, mobile, and network systems; internal and external access control lists; intrusion detection and prevention; electronic data protection; and evolving threats. Also provides information security consultation to project teams.
Requires thorough knowledge of information security practices and technologies; ability to speak and write in a clear and understandable manner for internal and external relations; understand extremely complex verbal or written instructions; understand information security issues dealing with computer hardware, software, and infrastructure; knowledge ordinarily acquired through attainment of a Bachelor's degree in Business or Information Systems plus 3 years of progressive information security experience. Information security certification preferred.
Essential Job Functions

• Work in the Information Security lab and work with a close team of analysts, engineers, and architects to mature the Information Security department and protect the organization and its donors.
• Analyzes and monitor enterprise information security systems and reports all suspicious activity. Requires use of a personal computer.
• Assists in developing and maintaining the information security response plan and enterprise information security policies and procedures.
• Operates in an unbiased manner, maintaining confidentiality and integrity with all information security events.
• Assists the Information Security Lead and other systems administrators on information security issues; provides information security consulting services to system administrators.
• Provide security best practices and guidance to project teams.
• Works with Information Security team to perform information security risk assessments and serves as an internal analyst for security issues.
• Responsible penetration testing and vulnerability management; provides accurate and timely reporting; escalates issues to management.
• Uses the Internet and other similar information collection methods to stay current with the latest information security threats and mitigation techniques.
• Provides analysis of information security processes and tools recommending innovative solutions for enhancing processes and toolsets.
• Assist with training personnel on information security issues.

Requirements

• This is a technical role which requires experience with several Information security tools including:

SIEM – LogRhythm and Rapid7 with RFP for new SIEM in the works
Akamai CDN w/ associated security tools
CASB / SASE
Palo Alto firewalls
Forensics
Microsoft 365 security administration
Okta (IAM)
CyberArk (Privileged access)
Sailpoint (Governance)
Varonis
Mobile Threat Defense
While the candidate doesn't have to know all these tools, a broad range of experience in the area in which these tools cover is required

• Prefer Security+ or similar certification or higher in the field of Information Security as well as a demonstrated interest in Information Security