Remote : Information Security Analyst III

A direct client of Atrilogy Solutions Group is in search of an Information Security Analyst III to join their team in Cypress, CA. This is a full-time direct hire role. Title: Information Security Analyst III Location: Cypress, CA (Remote) Duration: Full Time JOB SUMMARY The Information Security Analyst III leverages experience in information systems and security to assist with the prevention, detection, and response capabilities of the Information Security team. The Information Security Analyst III assists with Information Security Engineering in the development of architectures, solutions, and standards. In addition, the Information Security Analyst III works with other internal teams to promote secure designs and practices across the company that mitigate risks and meet business objectives and regulatory requirements. ESSENTIAL FUNCTIONS Security Operations - Ability to detect, prevent, and respond to security incidents. Identify risks and vulnerabilities in the network and systems, and ensure remedial actions are completed.

• Conduct event analysis and triage to identify, and respond to, malicious and suspicious activity on internal network and systems
• Configure and tune SIEM rules and alerts in line with the threat landscape and business operations
• Proactively hunt for threats within the environment
• Work with departments to remediate identified vulnerabilities
• Be part of on-call rotation for after hours escalations

• Actively review the security landscape and develop / review security policies and procedures to address new regulation, threats, or best practices
• Understand and review existing self-audits, recommend new self-audits based on new applications, services, threats, regulation or best practices and track remediation

• Recommend periodic security assessments, vulnerability, and penetration tests
• Assist in the analysis of security assessment results and development of management summary
• Assist IT groups in their understanding of the security assessment results and the remediation steps for low-medium complexity issues
• Lead the tracking of any remediation required due to security assessments / tests

• Contribute to annual Cybersecurity Awareness Month program and consistently promote good security practices
• Host "KnowledgeShare" presentations to raise awareness of security initiatives, and champion compliance and effective security practices

• Contribute to the development of the Security Program roadmap
• Lead and assist with projects defined in the roadmap

• Seek, suggest, and recommend new ideas for continuous improvements in work processes and results
• Assist with implementation of new security technologies
• Assist other technical teams to diagnose/troubleshoot when a security tool impacts the operation of their systems or software

• Bachelor's Degree or equivalent work experience in a related field required
• 5+ years' experience in an Information Security role to include experience in assessing and recommending internal application and infrastructure controls required
• Must be self-motivated and able to work independently, with minimal supervision and as part of a team
• Professional security management certification, such as a ISC(2) Certified Information Systems Security Professional (CISSP), SANS GIAC Information Security Professional (GISP), or GIAC-Security Expert (GSE), highly desirable
• Knowledge and experience with common Information Security management frameworks and best practices required, experience with the National Institute of Standards and Technology (NIST) frameworks and Center for Internet Security (CIS) Critical Security Controls preferred
• Experience with SIEM / log correlation technology and event analysis required
• Data manipulation and parsing skills: Ability to use Excel, regex, and other tools to parse, format, and organize large data sets
• Knowledge and experience with security infrastructures (e.g. Firewalls, IDS/IPS, VPN, Web Content Filters, Web Proxies, DLP) required
• General understanding of technical infrastructure (Active Directory, Applications, various Operating Systems, etc)
• Detail oriented with excellent interpersonal communication skills
• Expected to partner, collaborate, and mentor effectively with other teams on an ongoing basis