Security Analyst Level I

DBM Global Inc.; Phoenix (AZ); In loco; USD 70.000 - 95.000; Tempo pieno

Descrizione del lavoro

DBM Global Inc. is seeking a Security Analyst 1 in Phoenix to protect digital assets and support both on‑premises and cloud infrastructure. You will filter suspicious activity, generate reports for IT admins and managers, and assist with ITGC testing to ensure SOX compliance.

The role emphasizes vulnerability management and timely incident response. The ideal candidate has 3–5 years of security experience, a BS in CS or related field, and a plan to obtain ISC2 Cybersecurity certification within

Competenze

• 3–5 years' experience in security analysis.
• BS in Computer Science or related field, or equivalent experience.
• ISC2 Certified in Cybersecurity required within 6 months of hire.

Mansioni

• Monitor networks for security issues and assist in fixing vulnerabilities.
• 2
• Audit security activities and perform internal/external security audits.
• 3
• Monitor security controls including SIEM, firewalls, IDS/IPS, and encryption.
• 4
• Investigate security breaches and determine root cause, documenting findings.
• 5
• Verify third-party security standards and coordinate with vendors.
• 6
• Stay updated on IT trends, standards, and SOX compliance requirements.
• 7
• Understand information security management.

Conoscenze

Cybersecurity

Network security

Security architecture

SIEM

Information security

Auditing

Vendor coordination

SOX compliance

Formazione

BS in Computer Science or related field

Strumenti

SIEM software

Firewalls

IDS/IPS

Vulnerability scanning tools

Microsoft Office

Descrizione del lavoro

Overview

Security Analyst 1 is responsible for ensuring the protection of the company's digital assets from unauthorized access. This includes securing both online and on-premises infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches occur. If a breach does occur, security analysts are often on the front line, leading efforts to counter the attack. This position is responsible for generating reports for IT administrators and business managers to evaluate the efficacy of the security policies in place. This position will assist with testing IT General Controls for maintaining Sarbanes Oxley (SOX) compliance.

Responsibilities

• Monitor all DBMG computer networks for security issues and assist infrastructure team in fixing detected vulnerabilities to maintain high-security standards.
• Audit activities of security administrators on various software applications. Perform internal and external security audits that will allow the business to make decisions on what technology to implement. Perform operational risk assessment (OSA) process for all organization facilities.
• Monitor software to protect systems and information infrastructure, including firewalls, Proxies, SIEM, Antivirus, Intrusion Detection Systems, Intrusion Prevention Systems, and data encryption programs.
• Investigate security breaches and other cyber security incidents to identify the root cause. Document security breaches and assess the damage they have caused or may cause.
• Verify the security standards of third-party vendors and collaborate with them to meet security requirements.
• Stay up-to-date on information technology trends, security standards, and news.
• Understand information security management.

Qualifications

Work Experience

3-5 years' experience

Education/Training

BS in Computer Science or related field, or equivalent experience

Specialized Knowledge – Certificates & Licenses

Specialized Knowledge is required in the following areas:

• Protect digital files and information systems against unauthorized access, modification or destruction
• Maintain data and monitor security access
• Conduct internal and external security and compliance audits
• Monitor network, intrusion detection and prevention systems
• Analyze security breaches and other cybersecurity incidents to determine their root cause
• Document security breaches and assess the damage they cause.
• Work with security team to perform tests and uncover network vulnerabilities.
• Review and maintain corporate security policies
• Audit security awareness training program
• Coordinate security plans with outside vendors
• Information Security Analyst must have a current ISC2 Certified in Cybersecurity, Certification. If they do not have this certification, they will have 6 months to obtain certification

Software & Technology

Position will require the frequent use and knowledge of MS Windows 10 and/or MS Windows 11, MS Word, MS Excel, MS PowerPoint, MS Teams, and MS Outlook. Security Analysts are expected to have expertise in Cybersecurity, Firewalls, Network Security, Information Assurance, Security Information and Event Management (SIEM), Application Security, and Security Architecture. They must also keep up with the latest trends in Cybersecurity.