Description

You will manage day-to-day operations for securing information systems, focusing on network, system, and application security. You monitor the environment to detect and mitigate cyber-attacks, investigate real-time alerts, and execute the vulnerability management program. You also manage systems owned by the Security Risk and Compliance Office and research emerging threats.

Responsibilities

• Monitor security environments to detect and mitigate cyber-attacks proactively.
• Investigate and respond to real-time security alerts and compliance violations.
• Execute the vulnerability management program, including assessments and penetration tests.
• Manage systems owned by the Security Risk and Compliance Office (SRCO).
• Research emerging threats and assess new security technologies for enterprise value.

Required Skills

• 5+ years of experience in a security analyst or related role.
• Proficiency with Splunk, Tripwire, Metasploit, Delinea Secret Server, Azure, Active Directory, and SQL.
• Technical knowledge of firewalls, routers, switches, wireless access points, and VPNs.
• Experience with Windows server/desktop, Redhat, and Oracle database operating systems.
• Working knowledge of Rapid7 Nexpose, Qualys (Cloud), Carbon Black, and Veracode (SAST/DAST).
• Experience implementing or enforcing NIST, PCI DSS, or ISO frameworks.
• Ability to articulate security concepts to technical and non-technical staff.

Preferred Skills

• Four-year college degree or equivalent industry training and certifications.

Key Skills

Education

Any Graduate