Information Security Analyst

Atlas Technica LLC; Hyde Park Township (IL); Remote; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as an Information Security Engineer, where you will play a key role in enhancing security for clients in the investment sector. This position offers a unique opportunity to work closely with the Chief Information Security Officer and various teams to improve the security posture of the organization. You will engage in vulnerability management, risk assessments, and align with industry standards while enjoying a supportive and collaborative work environment. If you are passionate about cybersecurity and eager to grow your career, this role provides excellent development opportunities in a dynamic and rapidly growing organization.

Benefits

Comprehensive Benefits

Professional Development Opportunities

Competitive Salary

Friendly Work Environment

Qualifications

• Strong understanding of cybersecurity principles and practices.
• Experience with vulnerability management and remediation.
• Familiarity with Microsoft Intune and security benchmarks.

Responsibilities

• Review vulnerability reports and research scalable solutions.
• Provide accurate responses to Due Diligence Questionnaires.
• Perform test restores and conduct reviews of phishing tests.

Skills

Cybersecurity Principles

Vulnerability Management

Analytical Skills

Problem-Solving Skills

Communication Skills

Scripting

Collaboration

Independence

Education

Relevant Certifications (AZ-500, SC-900, etc.)

Tools

SIEM

IDS/IPS

Vulnerability Scanners

Microsoft Intune

RMM/SOAR Automation Platforms

Job description

Position Name: Information Security Engineer
Reports to: Internal Support Manager
Location/Type: Remote

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown 100% year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We are seeking a skilled Information Security Analyst to join our rapidly growing organization. This is a highly technical role providing excellent career development opportunities for the successful candidate. You will be working closely with the Chief Information Security Officer (CISO) and various teams to maintain and improve the security posture of Atlas and its clients. As a new position, this role will evolve over time, providing opportunities for growth and adaptation.

Responsibilities:

1. Vulnerability Management:
   • Review vulnerability reports.
   • Research scalable solutions for vulnerability remediation.
   • Collaborate with Support/NOC to ensure remediations have minimal impact on clients and facilitate maintenance windows.
   • Work with CS/Engineering to script and automate remediations.
   • Track progress in ticketing system, including master tickets for multi-client initiatives and subtickets for individual clients.
   • Address vulnerabilities for clients' third-party vulnerability management, including overlap with Cavelo, and apply remedies to other clients.
2. Risk Management and Due Diligence:
   • Provide accurate and timely responses to Due Diligence Questionnaires (DDQs).
   • Review and analyze findings from risk assessments and penetration tests for Atlas and clients.
   • Address identified vulnerabilities and recommend remediation strategies.
   • Participate in Business Impact Analyses and tabletop exercises to enhance organizational resilience.
3. Industry Benchmark Alignment and Standards Updating:
   • Start measuring alignment with Microsoft benchmarks in Intune and work on increasing the score.
   • Address vulnerabilities and issues identified in workstation builds, cloud infrastructure configurations, and security configurations.
   • Harden systems to enhance security across workstations, cloud infrastructure, and security configurations.
4. SOC 2 Maintenance and Additional Security Tasks:
   • Perform test restores.
   • Conduct reviews of our KnowBe4 phishing tests and training.
   • Review SIEM logs.
   • Assist in addressing cybersecurity incidents.
   • Work with NOC and outsourced SOC on remediation runbooks.
   • Perform additional tasks as assigned to support the security team and organization.

Requirements:

1. Strong understanding of cybersecurity principles and practices.
2. Experience with vulnerability management and remediation.
3. Familiarity with Microsoft Intune and security benchmarks.
4. Excellent analytical and problem-solving skills.
5. Ability to work collaboratively with cross-functional teams.
6. Strong communication skills, both written and verbal.
7. Strong ability to work independently.
8. Experience with security tools (SIEM, IDS/IPS, vulnerability scanners).
9. Experience with RMM/SOAR and other automation platforms.
10. Experience scripting.
11. Experience writing runbooks.
12. Experience working in an MSP environment (preferred, but not required).
13. Relevant certifications (AZ-500, SC-900, SC-300, CompTIA Security+, etc.).