Senior Information Security Analyst

Triumph Financial; Dallas (TX); On-site; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as a Senior Information Security Analyst, where you'll play a crucial role in safeguarding critical data and systems. This position offers the opportunity to engage in various aspects of the information security program, from investigating security alerts to improving detection and response capabilities. You'll work closely with a team of dedicated professionals, contributing to the overall security posture while enhancing your skills through continuous learning. If you're passionate about information security and eager to make a significant impact, this role is perfect for you!

Qualifications

• 4+ years of relevant IT or security experience.
• One or more information security certifications required.
• Experience with SOC I, SOX, GLBA compliance.

Responsibilities

• Protects confidentiality, integrity, and availability of data.
• Monitors and responds to security alerts.
• Conducts periodic audits to determine security violations.

Skills

Information Security

Incident Response

Risk Management

Log Analysis

Critical Thinking

Communication Skills

Education

Bachelor's degree in Information Security

Equivalent work experience

Tools

EDR

Email Security Controls

Job description

Job Description

Position Summary:

The Senior Information Security Analyst position investigates security alerts, manages, and improves the cyber security toolset, detection, prevention, and response capabilities. The analyst will engage in many facets of the information security program while providing guidance and functioning as an experience resource to junior analysts.

Day to day responsibilities:

• Protects the confidentiality, integrity and availability of critical data, systems, and services

• Categorizes risks and threats by identifying abnormalities and reporting violations

• Create and tune detection rules

• Ensures operation excellence of all security tools and controls managed by the security operations team.

• Determines security violations and inefficiencies by conducting periodic audits

• Monitors, investigates, and responds to security alerts

• Maintains information security documentation and standard operating procedures

• Maintains technical knowledge by attending educational workshops, achieving certifications, and subscribing to relevant publication

• Assists in various security projects

• Reviews and performsdailyroutine security system health checks and corrects deficiencies

• Provides documentation and evidenceto respond to auditsduring assessments and audits

• Answers security related helpdesk requests and approvals

• Provides on-call support as needed

• Contributes to team objectives

• Performs other duties as assigned

What you'll need to have to be successful in this role:

• Bachelor's degree in Information Security, Information Systems, Computer Science, or equivalent work experience

• 4+ years of relevant experience information technology or security experience

• One or more information security certifications

• Experience with SOC I, SOX, GLBA, and FFIEC regulatory compliance

• Experience utilizing EDR for Incident Response, creating detection rules, excluding false positives

• Experience creating detection rules, including requirements gathering, tuning, and defining response actions

• Experience managing email security controls (anti-spam, anti-spoofing, DMARC, etc.)

• Strong understanding of core security concepts: Encryption, IAM, Firewalls/Network Security, Incident Response, Security Awareness, DLP, Risk Management, and Least Privilege

• Basic understanding of the MITRE ATT&CK framework and the Incident Response Lifecycle

Must have these skills & abilities for the position:

• Ability to function with moderate supervision

• Strong interpersonal skills

• Quality written and oral communication, and presentation skills

• Critical thinking and problem-solving skills

• Attention to detail

• Ability to prioritize work based on deadlines and the impact on the organization.

• Commitment to operational excellence and continuous process improvement

• Willingness to expand and apply security knowledge, skills, and abilities to department initiatives

• Log analysis

Work Environment

The work environment characteristics described here may be encountered while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Moderate noise (i.e., business office with computers, phone, and printers, light traffic)

• Ability to work in a confined area

• Ability to sit at a computer terminal for an extended period. Occasional stooping or kneeling may be necessary

• While performing the duties of this job, the employee is regularly required to stand, sit, talk, hear and use hands and fingers to operate a computer keyboard and telephone

• Specific vision abilities are required by this job due to computer work

• Light to moderate lifting is required

• Occasional travel is required

#LI-BA1