[Hiring] Senior Information Security Analyst @American IT Systems

Role Description

The Sr. Information Security Analyst will be responsible for:

• Creating, driving, and executing standards, procedures, and processes to manage, mitigate, and reduce the risk of cyberattacks.
• Enabling global Security Operations by participating in operations, development, and engineering.
• Participating in a 24/7 on-call rotation, alert triage, and investigation if required.
• Owning and driving portions of one or more of the following functions:
  • Incident response
  • Threat detection
  • Offensive security
• Driving and developing orchestrations and automations that reduce manual tasks.
• Performing high-level intrusion and/or defensive analysis.
• Driving and delivering security-related audit/compliance/risk-reduction efforts for the team.
• Managing offensive and/or defensive security tooling development, testing, and management.
• Providing guidance to junior team members.
• Developing and delivering metrics/reports at an Organizational and/or Company level.
• Determining and delivering logging requirements to better detect and respond to security threats.
• Delivering team-level projects that drive down the overall risk and/or impact of a cybersecurity incident.

Qualifications

• Bachelor Degree in Arts/Sciences (BA/BS) or equivalent experience required.
• 6+ Years of experience in one or more areas: incident response, security engineering, offensive security, threat emulation, penetration testing, or security operations.
• 3+ Years experience creating automation/workflows to scale security operations.
• 8+ Years of relevant experience preferred.
• Experience identifying and addressing telemetry gaps in security monitoring.
• Experience developing and supporting cybersecurity metrics and reporting to support security operations.
• Experience leading purple team exercises, including supporting risk hunting, telemetry validation, and detection efficacy.
• Ability to lead complex incidents and evolve strategies based on new information.
• Advanced data analytical skills with the ability to investigate network, host, cloud, and identity platforms.
• Ability to work independently within a globally distributed environment.
• Strong written and verbal communications skills with the ability to effectively collaborate with partner teams.
• Ability to quickly adapt to new methods, work under tight deadlines and stressful conditions.
• Advanced investigative, analytical, and problem-solving skills.
• Advanced ability to set goals and handle multiple tasks, clients, and projects simultaneously.
• Ability to translate business needs and problems into viable/accepted solutions.

Requirements

• Windows, Mac, and Linux internals.
• Scripting (Powershell/Python/Javascript/Typescript).
• Forensic tools (FTK, Encase, X-Ways, SIFT).
• Cloud Computing (AWS), M365 Suite and ecosystem.
• Microsoft domain environments.
• IAM/AAA technologies and architectures (Active Directory, Okta, OpenID, SAML, Oauth, JWT).
• Physical and Virtual Networking technologies and architecture, SIEM (Splunk), EDR (CrowdStrike, Microsoft Defender).
• Experience with threat Intelligence Platforms and Feeds, Email security, DNS architecture and security required.
• Industry-level contributions (conferences, publications, tooling, seminars) preferred.

Benefits

• Professional Industry certification preferred.