Security Analyst

Triumph Group; Denver (CO); Remote; USD 90,000 - 120,000; Full time

Job summary

Triumph Group is seeking a Cybersecurity Analyst to provide technical expertise on IT systems and security applications, supporting enterprise security controls across the organization. The role involves endpoint security remediation, vulnerability assessments, intrusion prevention, security monitoring and incident response company-wide.

You will investigate threats, remediate incidents, and assist with security projects while maintaining ongoing awareness and training across IT and business

Qualifications

• 2–4 years of IT experience in roles leveraging IT as a business driver.
• IT Security Certification and/or experience in global security/compliance teams.
• Bachelor’s degree in Math or Computer Science required.
• Understanding of attack vectors, threats and remediation strategies.
• Familiar with control frameworks and reference architectures such as NIST and Cyber Security kill chain.
• Understanding of TCP/IP and OSI 7-layer model.
• Experience with Windows, UNIX, Linux, and cloud-based systems.

Responsibilities

• Investigate and respond to threats by analyzing security monitoring and vulnerability results.
• Perform malware remediation including root cause analysis.
• Support management of security systems, projects, policies, and standards.
• Evaluate new security technologies for IT integration.
• Monitor daily security incidents and remediation efforts.
• Maintain skills and certifications; communicate status to team and management.
• Assist with endpoint security risk assessments and remediation.

Skills

IT Security

Threat analysis

Vulnerability assessments

Incident response

Security monitoring

Endpoint security

Risk assessment

Communication skills

Problem solving

Team collaboration

Education

Bachelor’s degree in Math or Computer Science

IT Security Certification

Tools

NIST Framework

TCP/IP networking

Windows/Linux/Unix

Job description

Summary

The Cybersecurity Analyst provides technical expertise and functional knowledge on IT systems and security applications. As a member of the team, the Cybersecurity Analyst is responsible for support of Information Security controls such as endpoint security remediation efforts, vulnerability assessments, intrusion prevention systems, security monitoring, incident response company-wide, and all other administrative functions as assigned.

Responsibilities

• Investigate and respond to possible threats to Information Systems by analyzing results produced by security monitoring and vulnerability assessment tools.
• Perform endpoint, application, and server malware remediation tasks including root cause analysis on security incidents.
• Support the management of security systems, projects, policies, practices and standards
• Assist with the evaluation of new security related technologies which may be used to replace, enhance or integration with IT systems
• Monitor and perform daily security incident alert remediations.
• Maintain professional skills, certifications, and competencies
• Ensure policies and procedures put in place are adhered to and take corrective action where non-conformities are identified.
• Assist with endpoint security risk and vulnerability assessments including remediation efforts.
• Work within a service desk ticket system to manage day to day activities.
• Research new and better ways of mitigating security risks using emerging technologies and solutions
• Technical skills range from security monitoring solutions to forensic analysis, knowledge of internet filtering, AD management, IPS/IDS, Anti-virus, and data loss protection technologies
• Work with the IT Management Team to proactively maintain the overall Cybersecurity Program
• Work with IT and business teams for project support activities
• Increase Information Security awareness within the corporation by assisting with training on information security.
• Assist with monthly security metric reports.
• Communicate timely status updates (both verbal and written) to team members and management
• Performs other security duties as assigned

Qualifications

• Two to four years’ experience with companies that have successfully used IT as a business lever in driving optimization and change.
• Demonstrate the importance of good decision making and strategic discipline through example.
• IT Security Certification and/or and prior experience in a global security and compliance team required.
• Understands security regulations and has prior work experience in a highly regulated industry.
• Bachelor’s degree in Math, Computer Science required
• Minimum of 3 years of IT experience required
• Understanding of attack vectors, current threats, and their remediation strategies
• Understanding of control frameworks and reference architectures such as NIST, Cyber Security kill chain.
• Understanding of TCP/IP (Transmission Control Protocol/Internet Protocol) networking and the OSI (Open Systems Interconnection) 7-layer model.
• Working knowledge of Windows operating systems and products, UNIX, Linux, and Cloud-based systems.
• Strong analytical, problem solving, and attention to detail capabilities
• Ability to help others in the organization with IT security knowledge at a level of understanding appropriate to their job function
• Excellent oral/written communications, organizational, teamwork, and interpersonal skills
• Ability to multi-task in a fast-paced environment
• Demonstrated outstanding level of professionalism, including ability to exercise good judgment, discretion, tact, and diplomacy
• Ability to work independently under consultative direction only
• May require infrequent periodic travel to local plant and facility locations
• Some travel may be required for the purpose of meeting with clients, stakeholders, or off-site personnel/management.
• Some off hours work may be required.
• On call rotation required.
• #LI-Remote