IT Security Analyst (Internal Only)

Closing Date: October 23, 2023 at 4:00 PM Salary: Depending On Experience (DOE) This position is responsible for driving efforts to secure business data, investigating threats, and improving the overall security posture of the Enterprise. This position analyzes threats, secures assets, and implements security measures for new and existing technology, by personally performing the following duties, as well as demonstrating the GILA WAY. ESSENTIAL DUTIES AND RESPONSIBILITIESinclude the following. Other duties may be assigned. • Promotes and provides excellent guest service experiences to both internal and external guests. • Mentor and provide guidance to engineering and governance teams in support of day-to-day operations. • Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation • Provide consulting on security risk assessment and research, and recommend remediation plans and strategies • Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals • Review internal and external policies on compliance standards and recommend changes if necessary. • Perform initial triage, investigation, and escalations. Investigate alerts and alarms to provide details for incident response teams. • Serve as a mentor to less experienced staff • Perform investigations on mixed Linux and Microsoft Windows environments, including network devices, databases, web services, and enterprise applications. • Onboard new data sources into security tools and monitor their ongoing operation • Identify and assist with the remediation of phishing campaigns as reported by team members • Utilize enterprise Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) tools in accordance with in-house playbooks and standard operating procedures (SOPs) • Maintains a dependable work attendance record with extremely infrequent absences and/or lateness. • Performs other special projects and duties as assigned. EDUCATION and/or EXPERIENCE • High School Diploma or equivalent required. Associate’s Degree in Computer Science, Cyber Security or related major preferred. • Two (2) years of professional experience in Information Security required. • Exposure to any (EDR) tools, (SIEM) solutions, or log aggregation systems. • Fundamental understanding and/or working experience with different attack vectors such as malware, phishing, social engineering, or vulnerability exploitation. • Fundamental understanding and/or working experience with Active Directory, Windows, or Linux system administration. • Fundamental understanding and/or working experience with network services and devices, the OSI model, and TCP/IP protocols. • Excellent written, verbal, interpersonal, and collaborative skills. • Current knowledge on current cybersecurity news and trends. • Experience with programming/scripting is a plus. • Experience or training in compliance management. • Ability to perform the GILA WAY which is as follows: • Greet our guest • Interact positively with our guest • Listen actively to our guest • Appreciate our guest • Must possess excellent guest service skills, strong telephone etiquette, a self-starter with the ability to follow-up and complete tasks in a timely manner with minimum supervision. • Ability to establish and maintain effective working relationships as well as to gain the cooperation of guests and fellow team members. • Strong interpersonal and communication skills, both written and oral. • This position must have, or an ability to acquire within one year, an in-depth knowledge and thorough understanding of Enterprise Policies and Procedures, governmental regulations, and technical rules relevant to their responsibilities. Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.