Security Analyst

The Mice Groups, Inc.; Redwood City (CA); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is looking for a Senior Security Analyst to enhance the security and integrity of their systems and data. This role involves designing and implementing security solutions, managing vendor relationships, and collaborating with various teams to ensure compliance and reliability. The ideal candidate will have a strong background in cloud security, threat detection, and incident response, along with excellent communication and analytical skills. Join a dynamic team that fosters continuous improvement and innovation in the field of Information Security, where your contributions will play a crucial role in safeguarding sensitive information and maintaining a secure environment.

Qualifications

• Hands-on experience in security processes and technologies is essential.
• Proven cloud security experience in Azure and AWS is required.

Responsibilities

• Design and implement security solutions aligned with business goals.
• Monitor threats and manage security configurations across platforms.

Skills

Security Processes

Threat Detection

Incident Response

Risk Management

Analytical Skills

Communication Skills

Problem-Solving Skills

Education

Relevant Certifications (CISSP, CISM, Security+)

Tools

Astrix Security

Darktrace

CrowdStrike's Endpoint Security

BigFix

SOAR Platform

Cloud Security (Azure, AWS)

Job description

We are seeking a Senior Security Analyst for a Direct Hire/FTE position in Redwood City, CA. This position is onsite in Redwood City, CA.

Summary:

We are seeking an experienced Senior Security Analyst to join our team in ensuring the security and integrity of our systems and data. The ideal candidate will leverage experience in security processes, capabilities, and technologies to design and implement solutions that protect systems, data, people, and processes.

This role will help execute a strategic vision for security solutions that align with the company's overall business goals and objectives. Executing in an iterative fashion, this position will be involved in evaluating and managing solutions for threat detection, incident response, and risk management across all threat surfaces (endpoints, servers, email, social, Cloud etc.). This role will be both hands-on as well as adept at working with multiple internal and external teams including managing vendor relationships. This person will be well-versed in security metrics and performance measurement, working closely with other InfoSec colleagues to update reports and dashboards necessary for continuously monitoring, measuring, and learning from our tactics.

The Security Analyst will be reporting to the VP, IS Security, Risk, and Compliance.

Responsibilities:

1. Contribute to the design, implementation, and maintenance of security platforms and tools.
2. Help develop and execute a strategic vision for security solutions that align with the company's overall business goals and objectives.
3. Ensure the reliability and compliance of data across all digital systems and processes.
4. Foster a culture of continuous improvement and innovation within the Information Security team.
5. Monitor and identify potential threats from vulnerabilities via an Exposure Management platform. Triaging remediation efforts through patch management (BigFix) or manual intervention.
6. Implement and manage cloud security configurations to protect sensitive data and ensure compliance with ISO and NIST standards.
7. Utilize token security and SaaS Security Platforms to review alerts and monitor non-human identity posture and SaaS application configurations to verify proper IT hygiene and best practice recommendations.
8. Deploy and maintain Endpoint Security solutions to detect and respond to threats, device control events (USB). Additional Threat hunting may be required to validate incidents.
9. Daily validation of Identity Threat Protection data to safeguard user identities and prevent unauthorized access.
10. Perform regular security assessments and audits of production to ensure the effectiveness of security controls.
11. Daily monitoring and response to daily alerts captured by the on-prem network detection and response.
12. Stay up to date with the latest cybersecurity trends, threats, and technologies.

Required Skills, Experience and Education:

1. Hands-on experience with Astrix Security, Darktrace, CrowdStrike's Endpoint Security, Exposure Management, and Identity Threat Protection modules is a plus. Other EDR, NHI and NDR experience is acceptable.
2. Proven experience in cloud security within Azure and AWS.
3. Experience in runbook development via a SOAR (Security Orchestration Automation Response) platform is preferred.
4. Excellent communication and teamwork abilities.
5. Strong analytical and problem-solving skills.

Preferred Skills:

1. Experience with patch management platforms like BigFix.
2. Relevant certifications such as CISSP, CISM, Security+ or CrowdStrike University certificates.
3. Familiarity with security frameworks and standards such as ISO and NIST.
4. Ability to work in a fast-paced environment and manage multiple tasks simultaneously.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

IT Services and IT Consulting