About this role

Performs the identification, remediation, and documentation of moderately complex security testing and vulnerability assessments. Monitors and performs standard analysis of system/network activity to detect malicious actions, documents initial triage of security events for escalation to incident management, and reviews and analyzes daily security events, with limited guidance. Responds to security events, performs initial investigation and triage, and carries out mitigation actions. Conducts data collection, preservation, log analysis, and basic forensic analysis of digital media. Coordinates with other teams to triage and fix security issues, implement detections, identify and address root causes, and contribute to innovation. Monitors security controls for compliance with regulatory requirements and prepares responses and actions to audits. Collects evidence for and provides technical support to the compliance team, with limited guidance.
Minimum Job Qualifications
Education and/or Experience:
8 years of experience in information technology (IT), information security, cyber risk management, security advisory, or related field

Bachelor's Degree in Information Technology, Computer Science, Computer Security, Computer Engineering, or related field AND 4 years of experience in information technology (IT), information security, cyber risk management, security advisory, or related field

Master's Degree in Information Technology, Computer Science, Computer Security, Computer Engineering, or related field. AND 2 years of experience in information technology (IT), information security, cyber risk management, security advisory, or related field.

Job Skills:
Data Analysis Demonstrated ability to analyze and interpret data to produce actionable business insights.
Incident Management and Response Demonstrated ability in or knowledge of incident management and response, including timely handling and escalation of incidents to minimize business impact.
Security Operations Services Demonstrated experience providing security monitoring, incident detection, and response services.
Vulnerability Assessment Demonstrated ability in or knowledge of vulnerability assessment, including identifying, prioritizing, and developing remediation plans for security vulnerabilities.
Cybersecurity Trends Demonstrated ability in or knowledge of cybersecurity trends, including staying current with industry threats, best practices, and emerging technologies.
Information Vulnerabilities Demonstrated ability to assess and mitigate vulnerabilities in IT and physical information assets.
Cloud Security Demonstrated ability in or knowledge of cloud security, including protecting cloud infrastructure and data using risk management frameworks.

Preferred Job Qualifications
Education and/or Experience:
8 years of experience in information technology (IT), information security, cyber risk management, security advisory, or related field

Master's Degree in Information Technology, Computer Science, Computer Security, Computer Engineering, or related field AND 2 years of experience in information technology (IT), information security, cyber risk management, security advisory, or related field.

Scripting/Programming Experience:
3 years of experience working with or maintaining scripting/programming (e.g., BASH, PowerShell, Python, C, Assembler, ANSIBLE, SQL).

Cloud Experience:
3 years of experience in cloud applications, cloud platforms, and/or providing cloud infrastructure platforms in complex environments.

Technical Writing Experience:
3 years of experience writing technical documents (e.g., standard operating procedures, reports, executive summaries).

Information Security Certifications:
Information security certifications from industry respected organizations (e.g., SANS, ISC2, IAPP, ISACA).