Job Overview

The Information Security Analyst I supports the company’s existing information security programs and provides technical and analytical support for all aspects of our information security management system. The goal of the role is to ensure confidentiality, integrity and availability to all systems and company data assets.

Job Responsibilities

Participates in the operation of our security operations center (SOC).
Monitors systems for potential security breaches; investigate incidents, identify threats, and take appropriate action to mitigate risks.
Participates in the development and implementation of security policies, standards and procedures to safeguard against unauthorized access, modification and destruction of information assets.
Participates in 3rd party security audits and 3rd party pen testing services.
Works on the roll out of new security tools and processes.
Creation and management of security awareness training campaigns and phishing simulation campaigns.
Provides technical support for investigating security incidents, e.g., phishing attacks, DDoS attacks, data leaks, account compromises, etc.
Knowledge in Computer Network Defense, Database Administration, Encryption, Information Systems/Network Security, Operating Systems and Technology Awareness
Knowledge of data backup and recovery.
Knowledge of business continuity and disaster recovery continuity of operations plans.
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
Knowledge of controls related to the use, processing, storage, and transmission of data.
Knowledge of encryption algorithms.
Knowledge of the organization's enterprise information technology (IT) goals and objectives.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
Knowledge of measures or indicators of system performance and availability.
Knowledge of network traffic analysis methods.
Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
Knowledge of server and client operating systems.
Knowledge of current and emerging threats/threat vectors.
Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
Knowledge of penetration testing principles, tools, and techniques.
Familiar with AWS security architecture and tools and Microsoft Azure security architecture and tools.

Job Requirements

Bachelor’s degree in information security, computer science, engineering, or related technical field with 1-3 years of relevant experience.
Possess one or more basic information security certifications such as Certified Ethical Hacker, CompTIA Security+, CompTIA PenTest+, GIAC Information Security Fundamentals (GISF), GIAC Security Essentials (GSEC), (ISC)2 Associate, (ISC)2 Systems Security Certified Practitioner (SSCP), ISACA Cybersecurity Fundamentals Certificate, etc.
Excellent communication, presentation, and documentation skills.
Knowledge of one of more security frameworks, e.g., ISO-27001, NIST Cybersecurity Framework, PCI-DSS, SOC2, CIS Controls, NIST SP 800-53, etc.

To learn more about our organization and the exciting work we do, visit www.cambiumlearning.com

An Equal Opportunity Employer

We are dedicated to fostering a culture that celebrates unique backgrounds, ideas, and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, age, religion, sex, gender, gender identity/expression, sexual orientation, national origin, protected veteran status, or disability.

Cambium Learning Group

New Jobs

Information Security Analyst I