Sr Analyst Cyber Security

Academy Sports and Outdoors; Katy (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Academy Sports and Outdoors is seeking a skilled professional in Information Security based in Katy, Texas. The ideal candidate will have a Bachelor’s degree in Information Technology along with at least 5 years of relevant experience.

This position involves supporting a vulnerability management program, performing advanced threat analysis, and collaborating with various IT teams to enhance security measures. Candidates must also possess strong analytical and communication skills, especially to convey technical details to non-technical audiences.

Qualifications

• 5+ years of experience in information security in an enterprise environment.
• Expert knowledge of Windows, Mac, Linux/Unix operating systems.
• Experience conducting security assessments and analysis.
• Proven ability to communicate technical information effectively.

Responsibilities

• Support enterprise-wide vulnerability management program.
• Perform advanced threat analysis and modeling.
• Implement and manage security controls.
• Conduct application security reviews for web and mobile applications.

Skills

Database knowledge

Networking concepts

Virtualization skills

Endpoint security

Threat management

Network traffic analysis

Security tools analysis

Analytical skills

Communication skills

Education

Bachelor’s degree in Information Technology or relevant field

Tools

AWS

Cloud environments (IaaS, PaaS, SaaS)

Single-Sign-On (SSO)

Multi-Factor Authentication (MFA)

Job description

Education

• Bachelor’s degree in Information Technology or a relevant field is required. Preferred: industry certifications such as AWS, Certified Cloud Architect (CCA), Certificate of Cloud Security Knowledge (CCSK), CISSP, CEH, CCNA, CompTIA Cloud+.

Work Experience

5+ years of experience in working in information security in an enterprise environment. Expert knowledge of Windows, Mac, Linux/Unix, and iSeries (AS400) operating systems. Experience in conducting security assessments and analysis of applications and operating systems. Experience in providing cyber threat analysis to support development teams. Deep understanding of analyzing and prioritizing application security, risk assessment, validation of security pen test results, and vulnerability resolution. Experience with application support and system troubleshooting preferred. Experience collaborating with various levels of IT and management.

Skills

• Expert knowledge of database, networking, virtualization, and server hardware concepts.
• Master skills of endpoint security, threat management, and cyber security incident and response.
• Experience with Single‑Sign‑On (SSO), password reset, self‑service, federated identity, multi‑factor authentication (MFA), and IAM products and services, including Identity as a Service (IDaaS).
• Expertise in configuration and management of security controls for Cloud Environments, IaaS, PaaS, and SaaS platforms.
• Thorough understanding of network protocols and network traffic analysis, firewalls, intrusion prevention systems, proxies, PKI and HSMs.
• Expert skills in analyzing security systems logs, security tools and data.
• Ability to work with different teams on concurrent projects.
• Ability to document project requirements, define KPIs and produce reports showing project progress.
• Ability to communicate technical information to non‑technical audiences.
• Strong interpersonal, written, and verbal communication skills to interface effectively at various levels.
• Knowledge of Windows Server 2003/2008/2012/2016, Unix, Mac and Windows 10.
• Organized, detail‑oriented, able to meet critical deadlines, strong analytical and problem‑solving skills, creative resolution skills, work well under pressure.

Responsibilities

• Support enterprise‑wide vulnerability management program and remediation efforts.
• Perform advanced threat analysis and modeling to ensure controls continue to provide needed coverage.
• Implement and manage security controls to ensure continued protection of the enterprise.
• Complete and close assigned IT tickets for vulnerability remediation and endpoint protection.
• Serve as IT Security SME for business and IT projects and other initiatives.
• Support Cloud initiatives by providing security recommendations and implementing controls to protect IT assets in the public cloud.
• Perform application security reviews for web and mobile applications.
• Participate as key resource in CSIRT activities and investigations.
• Collaborate with the IT security & compliance team to deliver holistic solutions.
• Present solutions to various levels of management.

Physical Requirements & Attendance

Acceptable level of hearing and vision to perform job duties. Adhere to company work hours, policies, procedures, and rules. Regular in‑office attendance is required.

Equal Employment Opportunity

Academy is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, national origin, sex, age, disability, gender identity, sexual orientation, or any other category protected by law.