IT Security Analyst

Wellington Steele & Associates; City of Rochester (NY); On-site; USD 70,000 - 140,000; Full time

Job summary

Join a forward-thinking organization as an IT Security Analyst, where you will play a crucial role in safeguarding information assets. This position involves monitoring and analyzing security technologies, collaborating across departments, and developing best practices to enhance security measures. You will be at the forefront of protecting sensitive data, conducting audits, and implementing security policies. If you are passionate about IT security and thrive in a dynamic environment, this is an exciting opportunity to make a significant impact in the field.

Qualifications

• 5+ years of experience in Information Security as a Network Engineer or equivalent role.
• Strong knowledge of security technologies and processes.

Responsibilities

• Monitor networks for security breaches and investigate violations.
• Install and maintain security software to protect sensitive information.
• Conduct internal and external security audits.

Skills

Communication Skills

Problem-Solving

Security Analysis

Network Security

Education

Associate’s Degree in Information Systems

Security Relevant Certifications (SANS, ISACA, ISC2)

Tools

SIEM

DLP

Firewalls

Data Encryption Programs

Job description

Overview

An IT Security Analyst is a vital part of an organization’s mission to protect its information assets.

Salary range (depending on experience): $70k-$140k

The role is to monitor, analyze, test, and maintain security technologies and processes in support of the achievement of regulatory and security requirements.

As part of this work, it is important for the Analyst to have a working knowledge of the organization’s information architecture and business processes.

The IT Security Analyst works collaboratively with all departments in problem-solving issues related to security configurations and processes.

Strong communication skills and a high level of values are essential for this role.

DUTIES AND RESPONSIBILITIES:

1. Monitors the organization’s networks for security breaches and investigates a violation when one occurs.
2. Installs, utilizes, and maintains software, such as SIEMs, DLP, firewalls, and data encryption programs, to protect sensitive information.
3. Prepares reports that document security breaches and the extent of the damage caused by the breaches.
4. Researches the latest information technology (IT) security trends.
5. Helps plan and carry out an organization’s way of handling security.
6. Develops security standards and best practices for the organization.
7. Recommends security enhancements to management or senior IT staff.
8. Defines, implements, and maintains corporate security policies.
9. Conducts internal and external security audits.
10. Protects digital files and information systems against unauthorized access, modification, or destruction.
11. Works with vendors to promote optimal functionality, including documentation, analyzing change requests, and upgrades to ensure that the most current versions are available.
12. Advises team leadership on all aspects of planning and successful approaches to meeting project plans and goals.
13. Follows established departmental policies, procedures, and technical standards.
14. Works extended and non-standard hours as necessary to support security maintenance and implementation. Takes “on-call” rotation to provide twenty-four-hour support when appropriate.
15. Is responsible for attending all annual mandatory educational programs as required by position.

EDUCATION:

1. Associate’s Degree in Information Systems or related field required. Candidates with security relevant certifications (SANS, ISACA, ISC2) preferred.

EXPERIENCE:

1. Minimum of five years’ work experience in Information Security as a Network Engineer or equivalent role.
2. Experience with SIEM, IDPS, DLP is strongly desired.