Information Security Specialist

SSAB; Montpelier (IA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Excellent pay with bonus

Health insurance

Vision insurance

401(k) with employer match

Life insurance & STD/LTD

FSA/Dependent care FSA

Employee Assistance Program

Job summary

SSAB is seeking a Security Analyst to oversee governance, incident response, and risk assessment. The role includes preparing reports, planning security program components, and developing documentation to mitigate threats.

You will train staff and collaborate with teams to strengthen cybersecurity posture.

Qualifications

• Degree or equivalent experience in computer science or related field.
• Knowledge of network security architecture and defenses.
• Experience with risk analysis and security monitoring.
• Familiarity with regulatory/compliance requirements (e.g., NIST).
• Experience in vulnerability assessment and incident handling.

Responsibilities

• Prepare reports to apprise stakeholders of security activities.
• Plan and implement components of security programs.
• Develop security documentation and countermeasures.
• Train colleagues on security protocols and best practices.
• Investigate security incidents and contribute to response efforts.

Skills

Network security concepts

OS hardening

TCP/IP, DNS, DHCP

Access controls

Incident response

Education

Associates degree in computer science or related field

Three years of equivalent work experience in security

Tools

Vulnerability assessment tools

Job description

Oversee and Govern

• Prepare reports to keep organizational stakeholders apprised of security activities.
• Plan, coordinate and implement components of existing security programs.
• Support training and awareness program, assist in evaluations, planning future curriculum and managing users within the program
• Develop detailed security documentation
• Document cybersecurity countermeasures and risk mitigation strategies
• Train colleagues on security protocols and best practices.

Problem Solving

Analyze

• Determine the validity of trend data.
• Advise Information management on risk levels and security posture.
• Assess the effectiveness of cybersecurity measures utilized by systems
• Develop content for vulnerability assessment tool(s).
• Analyzing new methods used by cyber criminals

Protect and Defend

• Monitor potential targets for unauthorized access or use.
• Validate intrusion facts and respond to incidents
• Deploy defensive measures for Enterprise Infrastructure
• Review results of network scans, conduct threats assessments and rank vulnerabilities based on risk
• Determine deviations from baselines, acceptable configurations, assess the level of risks, and recommend appropriate countermeasures.
• Work with the vulnerability management team to identify opportunities and assist in the coordination of mitigating countermeasures.
• Conduct interviews of victims and witnesses to cybersecurity events.

Investigate

• Apply Tactics, techniques and procedures for a full range of investigative tools and processes as part of an Enterprise Incident Response team.
• Collect, and preserve digital evidence for analysis in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, supporting internal audit and legal teams.
• Test various security strategies and defenses

Job Knowledge and Skills

• Knowledge of network security and architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of basic system, network, and OS hardening techniques.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• Skill in applying host/network access controls (e.g., access control list).

Teamwork

• Able to work within a high performing cross-functional team environment
• Accountable for own work & deadlines
• Coordinate with other team members to resolve issues or complete project tasks

Communication Skills

• Provide initial user training including user documentation and training materials
• Provide manager with weekly status updates and elevate issues if necessary
• Communicate effectively with team members and users

QUALIFICATIONS - Education, Experience and Competencies

Required

• Associates degree in the field of computer science and or three years of equivalent work experience. Prior Experience in Networking, Software Development, Systems Engineering, Risk Analysis, Security Intelligence or IT Support.
• High level or personal integrity demonstrated by an unblemished career history
• Good Communication and management skills
• Strong knowledge of written and spoken English, data pre-processing skill and presentation development.
• Deeper knowledge of regulatory and compliance requirements.
• Vulnerability Assessment skills
• Regular and reliable attendance

Preferred

• Certificate Program or professional Certificate or Volunteer work supporting information security.
• Understanding of the NIST Cyber Framework and similar frameworks
• One or more certifications within the information and cyber security area
• Understanding of cryptographic solutions and standards.

WORK ENVIRONMENT AND PHYSICAL DEMANDS

• Operate in an office environment, routinely use standard office equipment such as computers, network tools/equipment, phones, photocopiers and scanners. This role is partially sedentary; however, some handling of materials is required. This would require the ability to walk, bend, kneel or stand, use of hands to finger, hold and handle, reach with hands and arms and to push/pull, lift or carry items up to 30 lbs.

POSITION TYPE – WORK HOURS - TRAVEL REQUIREMENTS

• Position is full time, exempt
• Position works day shift, Monday through Friday – additional work as needed
• Office presence required
• Travel up to 10% of time in the field or at other SSAB locations

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that may change at any time with or without notice.

Our Offer

SSAB BENEFITS – starting at hire!

• Excellent Pay with Additional Bonus
• Very Affordable Health Insurance
• Blue Cross/Blue Shield Medical
• CVS/Caremark Prescription
• Superior Vision
• 401(k) with Employer Match – 5%
• Company Paid Life Insurance - and STD and LTD*
• Optional Life, Hospital Indemnity, Critical Illness
• Healthcare and Dependent Care Flexible Spending Account (FSA)
• Employee Assistance Program

OUR CULTURE

At SSAB, we strive to create an environment where every team member is heard, valued, empowered, and engaged. We believe that diverse perspectives drive innovation and that everyone contributes to our collective success. We use our values – driven, true and ahead – in making everyday decisions, keeping the customer at the heart of what we do. This makes us all team players, each with the drive to improve. When joining SSAB you will become part of an organization of passionate problem solvers working together on important challenges. We will support your growth by providing a safe and friendly workplace. If you set out to achieve it, at SSAB you will have the possibility of broadening your skills and grow within your field or beyond.