Information Security Analyst I

About the Role

The Information Security Analyst I is a technical, internal-facing role responsible for monitoring and responding to security events, investigating vulnerability reports, planning and participating in system security reviews and audits, installing security software, configuring security products, assisting with platform upgrades, and supporting day-to-day information security operations.

Key Responsibilities

• Responds to information security alerts from systems including SIEM, Firewall/Proxy, AV/EDR tools, IDS/IPS tools, E-mail security gateways, and password vaults.
• Assists with the management and onboarding of new vendors into the VRM portal, including IRQ assessments and vendor management.
• Administers key technology within the information security program, acting as the first line of contact for platform user support and assisting with investigations and incident response.
• Troubleshoots applications, servers, and key information security services, and writes knowledge articles.
• Maintains and troubleshoots access management systems, assists with upgrades and new feature planning, and serves as backup for PAM management.
• Assists with GRC tasks including audit review, data governance review, access review, and compliance.
• Patches, maintains, and supports key information security systems.
• Evaluates and mitigates security vulnerabilities, monitors security posture, and escalates security issues.
• Participates in DR test processes, learning about DR principals and procedures.
• Looks for opportunities to improve confidentiality, integrity, and availability in all supported systems.
• Assists with projects, system integrations, and application upgrades.
• Participates in vendor security reviews, identifying and resolving issues.
• Researches and tests work independently, seeking guidance only after making conclusions and gathering evidence.
• Assists internal stakeholders with evidence gathering and analysis tasks.
• Performs other duties as assigned.

Requirements & Tech Stack

• General knowledge of MS Windows domain environment administration.
• General knowledge of incident response.
• General knowledge of vulnerability scanning.
• General knowledge of script reading.
• General knowledge of network design principles.
• General knowledge of virtualization technology.
• Demonstrated working experience in an IT discipline supporting any of Windows Active Directory, networking, security, virtualization, help desk, or other IT discipline.
• Experience configuring devices and services for compliance with organizational security standards.
• Familiar with reading and understanding configuration documents, security alerts, and log data.
• Comfortable proactively responding to security incidents.
• Experience configuring and testing platform upgrades or performing new software rollouts.
• Demonstrated ability to be resourceful, make sound decisions, balance multiple initiatives, and drive issues to closure.
• Passion for information security and a general desire to continuously learn.

Qualifications

• Degree in a technical (STEM) field or one year of experience in a technical role.
• Experience working with systems and software within an assigned technology domain preferred.
• Knowledge of Windows operating systems, Linux operating systems, server administration, desktop administration, troubleshooting, and user support preferred.
• Proven knowledge of administration tasks, including user/group/role administration, security permissions administration, access authentication and authorization schemes, and user provisioning preferred.
• Self-starter in systems administration and patching, including ability to track changes and provide security reporting on assigned systems preferred.
• Experience supporting Windows virtual desktop environments, Windows server infrastructure, vmWare systems, Linux, or vendor-provided platforms preferred.
• Understanding of network devices and principles to include routers, switches, gateways, physical access systems, and wireless access systems preferred.
• Basic knowledge and understanding of computer networking protocols, authentication protocols, and secure communications in a Windows domain environment preferred.
• Exposure to monitoring and escalating computer, network, and infrastructure security events including email phish investigation and operating system security preferred.

Working Conditions

• Standard office environment with frequent telephone communication, computer operation, and other office productivity machinery.
• Occasional moving and positioning supplies in excess of 20 pounds.
• Ability to sit for prolonged periods of time.
• Ability to operate standard PC equipment.
• Ability to manage frequent deadlines and tight schedules.

Hybrid Work Option

• Opportunity to work from home up to three days per week. Eligibility dependent upon factors detailed in PERA's Work from Home Policy.