Senior Information Security Analyst

We are partnered with an innovative managed service provider in the education sector that is looking for a Senior Information Security Analyst who can work on multiple complex projects and ensure networks, systems, and data are protected and available. The Senior Information Security Analyst will be a main point of cybersecurity expertise to internal staff.

• Work under limited supervision with members of the Information Security Office (ISO) and extended teams
• Perform varying security duties including: threat awareness, proactive network traffic analysis, incident response, forensic analysis, and resolution of security incidents
• Integrate knowledge of network protocols, services, threats, vulnerabilities, mitigation strategies, hardware capabilities, and other information to build a security environment that reduces and mitigates risk
• Evaluate a wide range of data, including Zeek (Bro) logs, NetFlow data, centralized syslog, authentication logs, and others to detect security incidents.
• Take timely action as appropriate: block problem traffic, send alerts, and/or investigate when suspicious activity is detected.
• Responsible for identifying and integrating available threat intelligence feeds with network security monitoring and SIEM services
• Responsible for performing threat hunting of anomalous activity; monitoring and responding to security alerts; maintaining the vulnerability management asset inventory to ensure accurate reporting; creating the weekly public vulnerability scan report; creating the monthly enterprise vulnerability risk status report; identifying and attending approved online training on a periodic basis

• BA/BS in Computer Science or related field or equivalent experience
• Certifications and/or equivalent training in a technical security specialty (e.g., GIAC, CISSP)
• Minimum of 7 years of experience in information security, cyber security, or network security engineering, the design, deployment, and implementation of security solutions including: continuous monitoring and making improvements to those solutions, working with an information security and security operations team
• Minimum of 4 years of experience running and supporting security information and event management (SIEM) services
• Minimum of 4 years of experience running and supporting vulnerability management services