[Hiring] Information Security Analyst @Revecore

Role Description

This position is responsible for maintaining the security and integrity of all data at Revecore. The primary functions within the position include:

• Keeping an ongoing analysis of current security measures and determining their effectiveness.
• Suggesting and implementing improvements to mitigate risk.
• Implementation of security measures for systems within the Revecore environment.
• Working closely with teams across all threads where security applies within the organization.

Key Responsibilities

• Ensure that Revecore assets and electronic data are adequately protected.
• Work closely with Compliance Officer, Privacy Officer, Security Officer, and CIO to understand Revecore security and privacy goals.
• Proactively develop, obtain approval, and implement information security projects that further protect Revecore’s sensitive information.
• Perform information security audits as assigned and document results.
• Ensure all audits are performed per the schedule, review results, and escalate issues/exceptions as needed.
• Fulfill any IT security/risk training initiatives to employees throughout the organization.
• Provide assistance with information security questionnaires (received from our clients) and send to Compliance Committee for final review.
• Participate on client calls on information security topics.
• Investigate, assess, document, and remediate any type of security breach or cyber security incident.
• Work with Systems Administrators to uncover undiscovered internal/external vulnerabilities.
• Fix discovered vulnerabilities to maintain high security standards.
• Expand and enforce company-wide best practices for IT security.
• Research security enhancements and make recommendations to the management team.
• Implement and maintain robust SEIM architecture.
• Keep up to date with IT trends and security standards.
• Serve as project manager/lead within IT security projects.
• Work closely with Systems Administration team to complete department projects, goals, and objectives.

Qualifications

• Bachelor’s degree in computer science, cyber security, or a related discipline.
• Industry certifications a plus (CISSP, CISM, CISA, GIAC, Certified in Risk and Information Systems Control, Certified Ethical Hacker).

Requirements

• Microsoft 365 Security (Microsoft identity and access management (IAM), Microsoft threat protection, Microsoft Information Protection (MIP), Microsoft 365 security and risk management, etc.).
• IDS/IPS systems, SIEM tools, and network scanners.
• Access control methodologies (RBAC).
• Identity and access management.
• Penetration testing of applications and infrastructure.
• Social engineering.
• Vulnerability and risk assessment.
• Security assessments of network infrastructure, virtual infrastructure, and applications.
• Information Forensics.
• Troubleshooting.
• DLP, AV, and anti-malware.
• TCP/IP, computer networking, routing, and switching.
• Cloud computing.
• Windows, UNIX, and Linux operating systems.
• Excellent report writing and communication.
• The ability to work well independently or with a team.
• Available to travel.
• Capable of meeting deadlines and budgets.

Work at Home Requirements

• A quiet, distraction-free environment to work from in your home.
• A secure internet connection is required.
• Home internet with speeds >20 Mbps for downloads and >10 Mbps for uploads.
• The workspace area accommodates all workstation equipment and related materials and provides adequate surface area to be productive.
• Must reside in the United States within one of the specified states.