Lead Security Analyst - NinjaJobs

Available in these Cities: Austin, TX,  Atlanta, GA,  Boston, MA,  McLean, VA  

The Security Operations team is responsible for designing and driving information security initiatives including defining policy, engineering defensive controls, and responding to incidents. We are looking for candidates with a strong technical background who can improvise and adapt to solving technical problems. As a Lead Security Analyst, you will be a key component of our front-line defense and overall security posture.

Responsibilities:

• Monitoring and reacting to security events
• Participation in incident response efforts
• Planning, coordinating, and/or executing security assessments of networks, systems, applications, and cloud platforms
• Working with system owners and stakeholders to mitigate issues found in security assessments
• Assist with governance, risk, and compliance initiatives as needed
• Developing and curating threat intelligence
• Working with the greater Information Security team to define and implement security policies, procedures, and controls
• General awareness of developments in information security and help in guiding the company’s response
• Providing security expertise and advice to other teams within the company
• Collaborating with other teams to solve business challenges

Ideal Candidate:

• 5+ years of experience in information security concepts, controls, and technology
• Extensive experience with server/workstations, computer networks, cloud platforms, their built-in security capabilities and hardening options.
• Experience with AWS and Azure cloud environments.
• Experience with Log Management/SIEM tools
• Experience with EDR, Antivirus, and security tools.

Familiarity with the following security-related disciplines with deep experience in several:

• Vulnerability management
• Forensic Analysis
• Application Security
• Cloud Security Posture Management
• IAM
• Penetration Testing
• Malware analysis
• Deep technical troubleshooting skills
• Familiarity with industry or regulatory compliance standards (CIS, NIST, SOC2, etc)
• Technical degree, certification, and/or 5+ years of experience related to information security
• Excellent communication skills, and the ability to explain security best practices to a non-technical audience
• Willingness and aptitude for learning new skills and adapting to new technologies
• Experience with programming and/or automation software
• Ethical moral compass