IT Security Analyst

Visionaryz Inc.; New York (NY); Remoto; USD 110.000 - 140.000; Tempo integral

Resumo da vaga

Visionaryz Inc. is seeking an experienced IT Security Analyst to support NG911 cybersecurity operations and security initiatives. The role requires deep expertise in IPS, threat analysis, incident response, and security automation, including SIEM/SOAR and firewall development.

The candidate will evaluate risks, bolster controls, and participate in configuration and testing of critical emergency communication systems, with a remote-first arrangement and onsite visits as needed.

Qualificações

• 8+ years of experience in security operations and IPS.
• Experience with threat analysis, incident response, and forensics.
• Proficient in SIEM dashboards, detection rules, and SOAR integrations.

Responsabilidades

• Evaluate security requirements and assurance levels.
• Analyze security policies, threats, vulnerabilities, and exploits.
• Develop and implement firewall solutions.
• Conduct cybersecurity investigations and forensic investigations.
• Monitor and respond to malicious activities and incidents.
• Create and maintain SIEM dashboards.
• Develop detection rules and reduce false positives.
• Support SOAR processes and security automation.
• Automate security processes using Python and batch scripting.
• Generate reports from SQL databases.
• Assess risks to critical applications and recommend controls.
• Communicate security risks and recommendations to stakeholders.

Conhecimentos

Threat analysis

Incident response

Security investigations

Security automation

Ferramentas

SIEM

SOAR

Firewall

Python

Batch scripting

SQL

Descrição da vaga

Work Arrangement: Remote, with onsite visits as required

Position Overview

We are seeking an experienced IT Security Analyst to support cybersecurity operations and security initiatives for a Next Generation 911 (NG911) program.

The ideal candidate will have strong expertise in intrusion prevention systems, threat analysis, security investigations, incident response, SIEM, SOAR, and security automation. This role will help evaluate security risks, strengthen security controls, and support the configuration and testing phases of critical emergency communication systems.

Key Responsibilities

• Evaluate business and technical requirements to determine appropriate security requirements and assurance levels.
• Analyze security policies, emerging cyber threats, vulnerabilities, and potential exploits.
• Develop and implement firewall solutions to mitigate security threats.
• Conduct cybersecurity investigations, threat analysis, and technical forensic investigations.
• Monitor and respond to malicious activities and potential security incidents.
• Analyze operating systems, networks, applications, and system services to identify potential cyberattacks.
• Develop security event playbooks and support incident response activities.
• Create and maintain SIEM dashboards to visualize security events and data.
• Develop detection rules and reduce false-positive security alerts.
• Support SOAR processes and security automation.
• Perform log onboarding and security event monitoring.
• Automate security processes using Python, batch scripting, and other tools.
• Generate reports and retrieve data from SQL databases.
• Assess risks to critical applications and recommend appropriate security controls.
• Communicate security risks and recommendations to relevant business stakeholders.

Required Qualifications

• At least 8 years of experience with Intrusion Prevention Systems (IPS) and related tools.
• Extensive experience performing cybersecurity and technical threat analysis.
• Experience monitoring and responding to malicious activity.
• Hands-on experience conducting cybersecurity investigations and technical forensic investigations.
• Experience analyzing systems, operating systems, networks, and applications for potential cyberattacks.
• Experience developing security event playbooks and responding to technical incidents.
• Experience creating SIEM dashboards and detection rules.
• Knowledge and experience with Security Orchestration, Automation, and Response (SOAR).
• Experience with log onboarding and security event monitoring.
• Scripting and automation experience using Python, batch scripting, or similar tools.
• Experience running SQL database reports to gather and analyze data.
• Familiarity with cybersecurity regulations, security standards, and compliance requirements.
• Strong analytical, troubleshooting, and communication skills."

Work Arrangement

This is primarily a remote position, Monday through Friday, from 9:00 AM to 5:00 PM Eastern Time. Candidates must be available to report onsite at Brooklyn, NY, when required.