[Hiring] Principal Security Operations Analyst @Ascensus

Role Description

The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.

Job Functions, Essential Duties and Responsibilities

• Accountability for team’s effectiveness and success
• Establish cross-training within team for availability of SecOps functions
• Security Event Monitoring & Response
  • Monitor security events from all tool sources
  • Analyze events filtering for false positives
  • Understanding of basic network services, vulnerabilities and attacks
  • Incident response process and escalation of events
  • Work with the security team to enhance and build new processes & procedures
  • Contribute to and maintain documented processes around monitoring & response
  • Work closely with information security, IT, risk & governance, and facilities teams
  • Report on security operations metrics quarterly
  • Process phishing email escalations from Associates
  • Correlate events with other known social engineering attempts
• Management of Security Solutions
  • Build, manage and maintain tools including, but not limited to:
    • IAM
    • IPS
    • SEIM
    • Web Application Firewall
    • Anti-Virus, Malware and Endpoint Protection
    • CASB
    • UBA
    • DLP
    • Web Proxy/Web content filtering
    • Vulnerability management
    • File integrity monitoring
    • Network Access Control (NAC)
  • Maintain documentation around tools
  • Champion the information security tool’s usage to maximize features
  • Review access requests around content filtering, removable media and exceptions
  • Work collaboratively with the various technology teams to accomplish security objectives
• Additional security experience may be gained depending on associate’s level of interest and availability:
  • Assessing and selecting security vendors or solutions
  • Identify emerging vulnerabilities and evaluate associated risks
  • Assisting in corporate incident response events
  • Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
  • Detailed configuration reviews
• Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
• Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
• Assist with other tasks and projects as assigned

Qualifications

• Experience managing security tools noted above
• Experience with monitoring, detecting, and responding activities
• Knowledge of information security risks, at least technical aspects including working knowledge around remediation
• Ability to lead, inspire and motivate associates on the team
• Ability to objectively review the team’s work, implement enhancements and monitor quality
• Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus
• Highly organized and able to process and manage inventories of controls and findings
• Excellent analytical and problem resolution skills
• Self-starter and able to work independently
• Persistence and strength to champion initiatives

Requirements

• A minimum of 5 years’ experience in Information Security or Security Operations
• Knowledge of networking preferred
• Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
• Bachelor’s degree plus equivalent work experience required
• CISSP certification preferred

Company Description

We are proud to be an Equal Opportunity Employer.

Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about the validity of a job posting, we strongly encourage you to apply directly through our website.