Security Analyst II

Amerisure Insurance Company; Farmington Hills (MI); Hybride; USD 95 000 - 125 000; Plein temps

Avantages offerts par ce poste

Flexible work arrangements

401(k) with profit sharing

Paid time off

Résumé du poste

Amerisure Insurance Company in Farmington Hills is seeking a Security Analyst II to monitor, analyze, and respond to security incidents, protecting the company's information assets. This role focuses on threat detection, vulnerability assessments, and implementing security protocols across networks, files, user accounts, and cloud environments.

The ideal candidate will have a strong security background, practical incident response experience, and knowledge of governance frameworks such as NIST,

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• 2 years security experience.
• Working knowledge of firewalls, VPNs, IDS/IPS, network monitoring, and traffic analysis.
• Knowledge of frameworks such as NIST, ISO 27001, and COBIT.
• Understanding cryptographic techniques and protocols (SSL/TLS, SSH, PKI).
• Experienced in cybersecurity incident response, breach containment and recovery processes.
• Staying current with evolving threats, technologies, and security protocols.
• Experience with Security Information and Event Management (SIEM) systems (e.g., FortiSIEM).
• Knowledge of Windows, Linux, and macOS, including their security configurations.
• Implement detailed instructions for securing cloud environments like AWS and Azure
• Experienced in conducting third-party cyber risk assessments.
• Can follow DevSecOps practices and make improvements to existing process.
• Knowledge of authentication, authorization, SSO, MFA (Okta) and IAM (SailPoint).
• Managing endpoint detection and response (EDR) tools.
• Apply project management, Agile practices and principles and lead stand-ups.
• Clear articulation of security policies, risks, and recommendations to non-technical stakeholders.
• Working closely with IT teams, developers, and management.
• Provide on-going, effective cybersecurity awareness program for the entire organization.
• Professional Certification (CISSP; CEH; CISM; CRISC; CompTIA Security+)

Responsabilités

• Monitor SIEM (Security Information and Event Management) tools for alerts and incidents.
• Perform risk assessments of third-party vendors.
• Perform incident response and assist in the remediation process.
• Generate security reports for management and compliance purposes.
• Support compliance efforts, such as audits and regulatory requirements.
• Support cybersecurity awareness program.
• Provide level 2 on-call security support.

Connaissances

SIEM monitoring

Risk assessments

Incident response

Regulatory compliance

NIST ISO 27001 COBIT

Cloud security AWS Azure

EDR tools

SSO MFA Okta

Threat management

OS security hardening

Formation

Bachelor’s degree

Outils

FortiSIEM

Description du poste

Amerisure creates exceptional value for its partners, policyholders, and employees. As a property and casualty insurance company, Amerisure’s promise to our partner agencies and policyholders begins with a comprehensive line of insurance products designed to protect businesses, as well as the health and safety of every employee. With an A.M. Best “A” (Excellent) rating, Amerisure serves mid-sized commercial enterprises focused in construction, manufacturing and healthcare. Ranked as one of the top 100 Property & Casualty companies in the United States, we proudly manage nearly $1 Billion of Direct Written Premium and maintain $1.21 billion in surplus.

Amerisure is currently recruiting for a Security Analyst II that can do a 3-day hybrid approach to support our IT team in our Farmington Hills Headquarters. The ideal candidate will also possess the following skill set.

Summary Statement The Security Analyst II is responsible for monitoring, analyzing, and responding to security incidents and threats to safeguard Amerisure's digital information. This role focuses on threat detection, vulnerability assessments, and implementing security protocols to protect the network, files, user accounts, and sensitive information. The Security Analyst provides knowledge in cyber security governance and cyber threat management, staying informed on the evolving threat landscape and collaborating with business units and IT to identify, prioritize, and mitigate risks effectively.

Essential Tasks/Major Duties

• Monitor SIEM (Security Information and Event Management) tools for alerts and incidents.
• Perform risk assessments of third-party vendors.
• Perform incident response and assist in the remediation process.
• Generate security reports for management and compliance purposes.
• Support compliance efforts, such as audits and regulatory requirements.
• Support cybersecurity awareness program.
• Provide level 2 on-call security support.

Knowledge, Skills & Abilities

• Bachelor’s degree or equivalent combination of education and experience.
• 2 years security experience.
• Working knowledge of firewalls, VPNs, IDS/IPS, network monitoring, and traffic analysis.
• Knowledge of frameworks such as NIST, ISO 27001, and COBIT
• Understanding cryptographic techniques and protocols (SSL/TLS, SSH, PKI).
• Experienced in cybersecurity incident response, breach containment and recovery processes.
• Staying current with evolving threats, technologies, and security protocols.
• Understanding types of malware, detection techniques, and analysis tools.
• Experience with Security Information and Event Management (SIEM) systems (e.g., FortiSIEM).
• Knowledge of Windows, Linux, and macOS, including their security configurations.
• Implement detailed instructions for securing cloud environments like AWS and Azure
• Experienced in conducting third-party cyber risk assessments.
• Can follow DevSecOps practices and make improvements to existing process.
• Knowledge of authentication, authorization, SSO, MFA (Okta) and IAM (SailPoint)
• Managing endpoint detection and response (EDR) tools.
• Apply project management, Agile practices and principles and lead stand-ups.
• Clear articulation of security policies, risks, and recommendations to non-technical stakeholders.
• Working closely with IT teams, developers, and management.
• Provide on-going, effective cybersecurity awareness program for the entire organization.
• Professional Certification (CISSP; CEH; CISM; CRISC; CompTIA Security+)

Just as we are committed to creating exceptional value for our Partners For Success® agencies and policyholders, Amerisure also remains committed to being an employer of choice. We reinforce this commitment by adhering to an Employee Value Proposition that, in part, is provided through a competitive total rewards package. This package includes competitive base pay, performance-based incentive pay, comprehensive health and welfare benefits, a 401(k) savings plan with profit sharing, and generous paid time off programs. We also offer flexible work arrangements to promote work-life balance. Recognized as one of the Best and Brightest® Companies to Work For in the Nation and one of Business Insurance magazine’s Best Places to Work in Insurance, we provide a workplace that fosters excellence and professional growth. If you are looking for a collaborative and rewarding career, Amerisure is looking for you.

Amerisure Mutual Insurance Company is an Equal Employment Opportunity employer. Amerisure provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex (to include sexual orientation and gender identity), national origin, age, disability, genetic information, veteran status, or any other protected characteristic under applicable federal, state, or local laws. Amerisure complies with all applicable laws governing nondiscrimination in employment in all locations where the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Amerisure prohibits harassment or discrimination of any kind and is committed to maintaining a workplace free from unlawful harassment or discrimination. Amerisure prohibits retaliation against anyone who reports discrimination, participates in an investigation, or opposes unlawful practices. Any improper interference with an employee’s ability to perform their job duties may result in disciplinary action, up to and including termination.