Security Analyst

TRIUMPH; Denver (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

Triumph is seeking a Cybersecurity Analyst to provide technical expertise across IT systems and security applications. You will support controls such as endpoint remediation, vulnerability assessments, intrusion prevention, security monitoring, and incident response company-wide.

The role requires 2–4 years in IT/security, a related bachelor’s degree, and security certs. You’ll work with Windows, UNIX/Linux and cloud systems, participate in risk assessments, and help raise security awareness

Qualifications

• 2–4 years of IT/security experience in a regulated environment.
• IT security certification required or equivalent experience.
• Bachelor’s degree in Math or Computer Science.
• Understanding of NIST Cyber Kill Chain and attack vectors.
• Knowledge of TCP/IP networking and OSI model.
• Windows, UNIX/Linux and cloud systems knowledge.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• Willingness to travel occasionally and be on-call.

Responsibilities

• Investigate and respond to security threats using monitoring tools.
• Remediate endpoint, app, and server malware incidents.
• Support security systems, policies, and standards.
• Evaluate new security technologies for IT integration.
• Monitor daily security incident alerts and remediations.
• Maintain professional skills and certifications.
• Ensure policy adherence and address non-conformities.
• Assist with risk and vulnerability assessments and remediation.
• Work with service desk to manage day-to-day activities.
• Assist with monthly security metrics and status updates.
• Provide training to improve security awareness.
• Perform other security duties as assigned.

Skills

Threat analysis

Incident response

Vulnerability assessment

Endpoint security

Security monitoring

Forensic analysis

AD management

Network security

Education

Bachelor's degree in Math or Computer Science

IT security certification

Tools

Windows

UNIX/Linux

Cloud-based systems

IPS/IDS

Anti-virus

Data Loss Prevention (DLP)

Active Directory management

Job description

Summary: The Cybersecurity Analyst provides technical expertise and functional knowledge on IT systems and security applications. As a member of the team, the Cybersecurity Analyst is responsible for support of Information Security controls such as endpoint security remediation efforts, vulnerability assessments, intrusion prevention systems, security monitoring, incident response company-wide, and all other administrative functions as assigned.

Responsibilities

• Investigate and respond to possible threats to Information Systems by analyzing results produced by security monitoring and vulnerability assessment tools.
• Perform endpoint, application, and server malware remediation tasks including root cause analysis on security incidents.
• Support the management of security systems, projects, policies, practices and standards
• Assist with the evaluation of new security related technologies which may be used to replace, enhance or integration with IT systems
• Monitor and perform daily security incident alert remediations.
• Maintain professional skills, certifications, and competencies
• Ensure policies and procedures put in place are adhered to and take corrective action where non-conformities are identified.
• Assist with endpoint security risk and vulnerability assessments including remediation efforts.
• Work within a service desk ticket system to manage day to day activities.
• Research new and better ways of mitigating security risks using emerging technologies and solutions
• Technical skills range from security monitoring solutions to forensic analysis, knowledge of internet filtering, AD management, IPS/IDS, Anti-virus, and data loss protection technologies
• Work with the IT Management Team to proactively maintain the overall Cybersecurity Program
• Work with IT and business teams for project support activities
• Increase Information Security awareness within the corporation by assisting with training on information security.
• Assist with monthly security metric reports.
• Communicate timely status updates (both verbal and written) to team members and management
• Performs other security duties as assigned

Qualifications

• Two to four years’ experience with companies that have successfully used IT as a business lever in driving optimization and change.
• Demonstrate the importance of good decision making and strategic discipline through example.
• IT Security Certification and/or and prior experience in a global security and compliance team required.
• Understands security regulations and has prior work experience in a highly regulated industry.
• Bachelor’s degree in Math, Computer Science required
• Minimum of 3 years of IT experience required
• Understanding of attack vectors, current threats, and their remediation strategies
• Understanding of control frameworks and reference architectures such as NIST, Cyber Security kill chain.
• Understanding of TCP/IP (Transmission Control Protocol/Internet Protocol) networking and the OSI (Open Systems Interconnection) 7-layer model.
• Working knowledge of Windows operating systems and products, UNIX, Linux, and Cloud-based systems.
• Strong analytical, problem solving, and attention to detail capabilities
• Ability to help others in the organization with IT security knowledge at a level of understanding appropriate to their job function
• Excellent oral/written communications, organizational, teamwork, and interpersonal skills
• Ability to multi-task in a fast-paced environment
• Demonstrated outstanding level of professionalism, including ability to exercise good judgment, discretion, tact, and diplomacy
• Ability to work independently under consultative direction only
• May require infrequent periodic travel to local plant and facility locations
• Some travel may be required for the purpose of meeting with clients, stakeholders, or off-site personnel/management.
• Some off hours work may be required.
• On call rotation required.