Information Security Analyst 2

JOB SUMMARY

The Information Security Analyst II is responsible for monitoring, evaluating, and maintaining systems and procedures to safeguard internal information systems, network, databases, and Web-based security. The Analyst will conduct vulnerability assessments and monitors systems, network, databases and web for potential system breaches. Responds to alerts from information security tools. Reports, investigates and resolves security incidents. Recommends and implements changes to enhance systems security and prevent unauthorized access. Researches security trends, new methods and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Other tasks may also be required from time to time, at the discretion of management, in order to achieve department and company objectives.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Responsible for monitoring, analyzing, and interpreting security/system logs for events, operational irregularities, and potential incidents and escalating issues as appropriate.
• Responsible for analyzing suspicious emails, phone calls, and other potential security incidents to determine false positives or needs for escalation.
• Responsible for utilizing security tools such as anti-virus, endpoint protection, network analysis, SIEM, and other essential security solutions.
• Provides support to remediate vulnerabilities such as patching, implementing controls to mitigate risk, and ensuring secure configuration of systems.
• Performs regular threat hunting utilizing security tools and intelligence information to identify and remediate potential security threats.
• Perform research and remain aware of new and emerging threats to ensure newly discovered vulnerabilities are addressed.
• Assists with incident response when the incident response team is active. Incident response tasks may be identification, log and event collection and analysis, forensic investigation support, communication support, and evidence handling.

May be modified from time to time. Other duties, tasks and work may be assigned.

METRICS

• To consistently meet deadlines and objectives as agreed and typically described in quarterly reviews or through other project planning efforts
• To handle ongoing projects and day-to-day demands that are not identified in formal quarterly objectives in a timely and accurate manner
• Adherence to budgets
• Adherence to/achievement of benefits described in project business case (cost/benefit) analyses
• Information Security Analyst I will be measured by Monthly Project Completion and Daily metrics.

QUALIFICATIONS

Knowledge of: Operating systems; current equipment and technologies in use; Windows system administration, enterprise backup and recovery procedures, and system performance monitoring tools;

It is essential that candidate possesses or can quickly acquire the necessary knowledge of the following systems, which are crucial to the business:

• Prior hands-on experience in network, system, and/or endpoint security operations required.
• Solid understanding of information technology and information security including; firewalls/UTM’s, IDS/IPS, VPN’s, penetration testing, security event monitoring, and other security systems with an emphasis on threat hunting and log analysis.
• Excellent written and verbal communication skills.
• Exceptional analytical and problem-solving skills; someone who ‘sees’ the box differently.
• Understanding of Security Frameworks; NIST, ISO 27000 and other recognized frameworks
• Understanding of IT infrastructure, information security, and compliance controls.
• SSCP, Security+, or other recognized security certification is preferred.
• Comfortable with multiple, current operating environments.
• Hands-on experience with various security tools.
• Ethical hacking and malware analysis experience is a plus.

KNOWLEDGE & SKILLS REQUIRED

• Work independently with little or no supervision
• Ability to multi-task
• Ability to work at fast pace
• Attention to detail
• Ability to problem solve
• Strong writing and communication skills
• Sensitivity to user needs

EDUCATION & EXPERIENCE

• High School Diploma, equivalent and/or technical school preferred
• One to Three years related experience and/or training preferred
• Prior supervisory experience
• Technical product knowledge preferred

PHYSICAL DEMANDS

• Work environment includes typical computer related noise levels and paper and equipment generated dust.
• Exposure to video display terminals occurs on a regular basis.
• Incumbent is on call to provide support services during off hours.
• Scheduled night and weekend work are required.
• Occasional Domestic and International travel may be required.
• Occasional sitting, frequent walking, reaching/working overhead, climbing or balancing, stooping, kneeling, crouching or crawling, continuous standing and repetitive hand motion.
• Lifting requirements include occasional lifting of 50 pounds with more frequent lifting of 10 pounds.

EMPLOYEE EVALUATION SUMMARY

• Probationary Review – A written evaluation of the employee’s performance in accounts receivable will be issued to determine permanent employment. This is typically done approximately 80 days after employment.

• Quarterly Evaluations – A quarterly written assessment will be issued which briefly describes the individual’s performance in this position.

• Annual Reviews – A more detailed review of the overall performance in this position, where the employee is rated and typically compensated in accordance with that rate.

WORK SCHEDULE

This is an exempt position which requires a work schedule that will achieve the results and objectives identified by the company and ecommerce management. Generally, the company operates and most of those who will interface with this position work normal business hours which are 8:00 am to 5:00 pm Monday through Friday. Nights and weekends may be required at times based on current project and implementation needs, deadlines, and workload.

WORK ENVIRONMENT

It may be necessary from time to time to travel to other offices, plants and inventory warehouse environments relative to the requirements of the position.

Dress attire is casual but professional in an office setting. All employees are required to wear Security access card and encouraged to wear apparel with company logo. All employees must always adhere to Safety Policies.

EMPLOYER'S RIGHTS

This job description does not list all the duties of the job. You may be asked by supervisors or managers to perform other duties. You will be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason”.

SALARY INFORMATION

The recruiting base salary range for this full-time position is $70,000 - $100,000 / year. Within the range, individual pay is determined by factors, including job-related skills, experience, and relevant education or training. Additionally, this role is bonus-eligible, with a target bonus percentage that provides an opportunity to earn even more based on company performance.

BENEFITS INFORMATION

Radwell offers a comprehensive benefits package including health, dental, and vision coverage. The Company provides company sponsored short-term and long-term disability benefits, as well as $50,000 in Life insurance. These benefits, along with additional voluntary benefits, are available to all regular full-time employees beginning on first day of employment. All employees are automatically enrolled at 3% into the Company’s 401(k) Plan on the first of the month following 90 days of continuous employment. Employees are eligible for common paid Company Holidays and 15 days of PTO annually, which begin accruing on first date of employment and may be used immediately upon joining the team.