Cloud & Infrastructure Security Analyst

Ewc-Corporate-LL; Plano (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

European Wax Center is seeking an IT Infrastructure & Security Analyst to support and secure our diverse infrastructure and information systems. You will monitor, patch, and improve security controls across cloud and on-premises environments and partner with the SIEM team to identify threats.

You will assist with incident response, governance, risk, and compliance activities, and work with cross-functional teams to implement security policies and solutions for our organization.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information technology or coursework/certification (including, but not limited to: CompTIA Security+, Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), etc.) or equivalent practical experience.
• 2+ years in Security and security technology roles.
• 4+ years in Microsoft technology administration; strong knowledge of O365 environment administration, including Azure, Azure AD, SharePoint, Office, One Drive, and Teams.
• Technical knowledge of endpoint security technologies including NGAV, EDR, and MDM.
• Email security administration and implementation experience.
• Exposure to web app firewall management.
• Excellent knowledge of Security Awareness Training Delivery, Policy and Procedural documentation, Identity Management, Privileged Access, and other security methodologies.
• Experience with Governance, Risk Management, and/or GRC, or solutions.
• Conceptual knowledge of federation between sites and federated identity.
• Knowledge of security assessments and vendor risk management.

Responsibilities

• Supports Infrastructure & Cloud Security initiatives per the IT strategy.
• Implements and refines procedures to govern infrastructure security for our business.
• Promotes a broad range of vertical infrastructure security objectives such as risk and identity management, up-to-date devices (i.e., OS and software patching), data management, and information protection.
• Assists with hardware and software implementation as needed for new corporate initiatives.
• Run automated scanning tools to find unpatched software or weak configurations.
• Performs monitoring and analysis of daily events on a variety of systems to detect infrastructure security risks and threats.
• Partners with the SIEM team in monitoring system logs and traffic for suspicious activity using
• Run security scans, patch software, and fix weaknesses in servers, firewalls, and cloud configurations.
• Provides support including network, application, and desktop (remote and on-site) troubleshooting for incidents.
• Logs, triages, and routes infrastructure security issues to the appropriate IT teams
• Helps manage user permissions, firewalls, network segmentation, and privileged access management.
• Supports incident response process by documenting all actions taken during investigations.
• Collaborates with business and technology leaders to ensure the successful remediation of discovered infrastructure security weaknesses.
• Assists with reporting on gaps, project progress, and technology posture.
• Works closely with cross-functional teams to ensure technology implementations follow the policies and procedures defined by this role.
• Collaborates, as needed, with external auditors to ensure maturity and risk management assessments are completed and compliance certifications are achieved annually.
• Acts as on-call contact for Security escalations.
• Completes projects and daily tasks; as assigned.

Skills

SIEM expertise

Cloud security

O365 administration

Firewall management

Vulnerability management

Incident response

Policy governance

Communication skills

Identity management

Threat monitoring

Education

Bachelor’s degree in CS/IT or equivalent

Certifications: CISSP / CISA / Security+

Tools

Azure

AWS

O365

CrowdStrike

Logz.io

BitSight

Osano

Lokker

GoTo

Job description

European Wax Center is seeking an IT Infrastructure & Security Analyst to support and secure our diverse infrastructure and information systems. You will monitor, patch, and improve security controls across cloud and on-premises environments and partner with the SIEM team to identify threats.

You will assist with incident response, governance, risk, and compliance activities, and work with cross-functional teams to implement security policies and solutions for our organization.