Job summary
The Lead Information Security Analyst for the Security Incident Response (SIR) team is responsible for understanding complex business information technology needs specifically focused on the information security infrastructure services.Assumes the lead role supporting the Security Operations Manager in monitoring, investigating, and responding to security events.Provides long-term solutions to Information Technology needs, including protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.
Job seniority: mid-to-senior level
Responsibilities
• Assuming the lead role in monitoring, investigating, and responding to security events• Providing guidance and prioritization to tasks, as well as assigning tasks and mentoring the team• Providing long-term solutions to Information Technology needs, including protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction
Requirements
• 5+ years of experience with networking security technologies for the following security technologies are required: Network security: next-gen firewalls, cloud security group, ACLs; Logging and monitoring: SIEM and Cloud Access Security Broker (CASB); Endpoint security: Antivirus, DLP and host compliance; Azure/AWS cloud services and infrastructure• 5+ years of experience in administering IT security controls in an organization• Prior experience performing security reviews and risk assessments• Demonstrated leadership experience in progressively responsible roles in a demanding environment• Bachelor's degree in Information Systems, Information Security, Computer Science or equivalent combination of education and experience• 5-7 years of IT security or information security experience with a proven ability to understand complex problems within the field of security operations• Ability to effectively convey complex issues and communicate to a variety of audiences including technical staff, peers, as well as senior management, and oversight bodies• Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk• Windows workstation and server administration experience• Experience in product evaluation and managing vendor relationships
Key Skills Needed
• Next-gen firewalls• Cloud security group• ACLs• SIEM• Cloud Access Security Broker (CASB)• Antivirus• DLP• Host compliance• Azure/AWS cloud services and infrastructure• IT security controls administration• Security reviews and risk assessments• Leadership skills• Technical infrastructure knowledge• Windows administration• Vendor management• Written and verbal communication skills• Interpersonal and relationship-building skills• Project management skills