Security Analyst

Cyber Security Analyst

Location: Palm Springs CA 92262 ON-SITE POSITION

Salary: Max Salary $100k

Job Description Summary

Responsible for assisting the Director of Information Security and Compliance with protecting information systems and data from cyber-based threats. Actively develops and executes operational processes, procedures, and protocols to prevent and respond to cyberattacks from threat sources seeking to cause damage or steal sensitive information. Establish & implement security best practices & policies. Mentors Cyber Security Analyst I’s.

Essential Duties and Responsibilities (other duties may be assigned)

• Monitor, detect, respond to and document cyber threats, events, and incidents as well as validate, assess and mature various operational processes.
• Review malware alerts on a daily basis and communicate to respective parties to contain and eradicate them.
• Escalate to I.T. management any vulnerable areas and solutions to increase security relative to open gaps or deficient processes.
• Support external forensic first responder capabilities if/as needed.
• Ensure all systems operate in accordance with all applicable Tribal regulatory controls and federal standards (PCI, GDPR, CCPA, etc.).
• Perform periodic audits of credentials and access requirements for all departments.
• Participate in vulnerability detection and associated remediation efforts.
• Perform and review vulnerability assessments to identify weaknesses and assess the effectiveness of existing controls.
• Identify and define security requirements for operating systems and applications.
• Analyze firewall, network, and SIEM rules to provide recommendations for security improvements.
• Assist with audit requests for documentation, responses, and remediation.
• Maintain knowledge of current and emerging vulnerabilities, malware, infiltration techniques, forensics, and threats.
• Work with I.T. security team to ensure endpoint security is installed and up to date on all pertinent systems.
• Work on emerging projects to help improve security posture.
• Participate in the creation, enforcement, and consistent update of cybersecurity-based documentation such as policies, procedures, guidelines, incident response and disaster recovery plans.
• Assess and improve security posture using attack simulation tools.
• Backup Cyber Security Analyst I as required

Education and/or Experience

• Minimum 2 years of experience in the protection, analysis and support of a technology-based organizational support role as a Cyber Security Analyst, Security Analyst, Security Operations Analyst or a similar security-related area plus an additional 2 years of experience in an IT support related position
• Industry certification (such as CompTIA Security+, CySA+, or similar) is highly desired.
• Working knowledge of principal cybersecurity-centric technologies and applications such as firewalls, EDR, IDS/IPS, DLP, encryption, anti-malware, networking protocols, Microsoft Windows security events, and similar systems and tools.
• Proficiency with general system log monitoring, correlation, and threat management; SIEM event aggregation, correlation, and analysis is a plus.
• Knowledge of incident response, investigations, and related cybersecurity-based operational processes.
• Understanding of common email-based threats, including phishing and other exploitation techniques combined with the ability to rate emails as malicious/clean and take necessary steps.
• Experience with PC and server hardware utilizing Microsoft Operating Systems (Windows 10 and above, Windows Server 20xx), Microsoft Exchange, and Microsoft Office Suite.
• Experience with processing vulnerability assessments and related information and coordinating and/or conducting essential responses.
• Excellent verbal, written, communication and interpersonal skills.
• Ability to thrive in a fast-paced, highly-matrixed, and rapidly-changing environment.
• Ability to work after normal business hours as needed or required.
• Bachelor’s degree in computer science or information sciences from a four-year college or university, an equivalent combination of education and experience will be considered.