Senior Information Security Analyst

Doc PersonalBeratung GmbH; South Carolina; On-site; USD 110,000 - 150,000; Full time

Job summary

Doc PersonalBeratung GmbH is seeking a Security Analysis and Event Management professional to monitor college information security operations, SIEMs, and DLP, and to oversee remediation of incidents. You will work with the CISO to coordinate security efforts and improve defenses across networks, endpoints, and servers.

Role includes vulnerability testing, incident response, and ongoing security research, with opportunities to guide junior staff and collaborate with IT and project teams.

Qualifications

• Bachelor's degree in CS, IT, or related field.
• 5-10 years of information security experience.
• Knowledge of NIST, CIS, PCI, FedRAMP.

Responsibilities

• Monitor security operations and report issues to CISO.
• Perform vulnerability scanning and baseline configurations.
• Lead security activities and assist project teams.
• Coordinate incident response and remediation with IT.
• Stay current on security threats and regulations.
• Mentor junior analysts.

Skills

Security monitoring

Vulnerability testing

Incident response

Security architecture

Compliance knowledge

Education

Bachelor's degree in CS/IT

Tools

DLP

SIEM

Patch management

Job description

Security Analysis and Event Management

Actively monitor college Information Security operations and reporting systems for security issues / risk including network, endpoint devices, mobile devices, and servers. Monitor system consoles including but not limited to DLP, SIEM, anti-virus, endpoint advance threats, patch management, windows update services, software inventories and network traffic for potential security threats, risk and issues. Participate in the active remediation and/or oversight in the correction of identified issues, risk, deficiencies and incidents. Review daily security reports / dash boards for anomalies or security threats and remediate any issues identified. Promptly investigate high priority notifications and report findings to the CISO or appropriate designee. Document daily activities/incidents in the appropriate tracking systems where applicable.

Essential

Percent of Time: 25

Vulnerability and Penetration Testing

Perform vulnerability scanning and penetration testing for applications, servers, network, endpoint devices and mobile devices. Develop and validate baseline security configurations and controls for critical network configurations. Coordinate vulnerability patch management process and prioritization. Provide guidance for remediation of system vulnerabilities and baseline security configurations.

Essential

Percent of Time: 25

Security Subject Matter Expert

Along with the CISO, serve as an Information Security Subject Matter Expert on College RFP and Project Teams. Plan, assist and approve any Information Security Architecture design and procurement. Work with the CISO and other staff to develop and implement security procedures and practices following best security practices and the State Information Security Framework (DIS-200). Coordinate and lead technical security activities. Actively participate in routine assessments of college offices and programs for compliance.

Essential

Percent of Time: 15

Incident Response and Remediation

Work with the CISO to investigate suspected security breaches and/or policy violations and formulate recommendations for corrective action. Develop and maintain incident verification and remediation playbooks in partnership with IT technical teams. Work with the CISO, Office of General Counsel, IT and Office of Personnel Services to facilitate eDiscovery requests, litigation holds and priority personnel actions.

Essential

Percent of Time: 20

Security Research and Evaluation

Stay abreast of current security threats and vulnerabilities. Maintain a working knowledge of established college policies and procedures. Maintain a working knowledge of established Federal and State Information Security regulations.

Essential

Percent of Time: 5

Lead Junior Information Security Analyst

Provide mentorship and guidance to junior staff; provide relevant technical training and guidance to junior analysts and other departments. Leads junior analysts in core information security functions (for example, installation, configuration and maintenance of information security equipment). Collaborates with management to design and implement long-term information security strategies.

Essential

Percent of Time: 10

Qualifications

A Bachelor's Degree in computer science, information technology, or related field. 5-10 years of experience in areas of information security administration, network administration and/or information technology systems administration. Candidates with an equivalent combination of experience and/or education are encouraged to apply.

Knowledge of information technology, security concepts, and security frameworks. Experience in the installation, setup and operation of IT infrastructure (e.g., routers, switches, firewalls, intrusion detection/protection devices, and data encryption). Knowledge of operating systems (e.g., Android, iOS, Linux, Windows, VMWare), Cloud computing, networks, hardware and software platforms, and protocols related to information security. Experience performing vulnerability scanning, assessment, and analysis and leading infrastructure patch management. Experience managing and responding to information security risks, threats and incidents. Expert knowledge of applicable information security trends and best practices. Knowledge of applicable internal and/or external regulatory policies, standards, procedures and controls (e.g., NIST, CIS). Knowledge of Payment Card Industry (PCI) controls, and the Federal Risk and Authorization Management Program (FedRAMP). Experience working with IT security vendors to implement and maintain security solutions.

Preferred, but not required certifications include: Certified Information Systems Security Professional (CISSP), or Global Information Assurance Certification (GIAC).

Must possess a valid driver's license and a good driving record; must successfully pass a background check.

*Salary is commensurate with education/experience which exceeds the minimum requirements.

Offers of employment are contingent upon a successful background check.