JOB PURPOSE: Provide technical analysis, guidance, mitigation, and remediation of logical security related threats to Rent-A-Center infrastructure and improve overall data security posture. This Information Technology professional will work with various teams to conduct evidence-based reviews by means of correlation of system logs, events and processes for risks, threats, and indicators of compromise (IOC). Providing detailed analysis and applying defense-in-depth methodology to address risk and logical security threats with the specific goal of protecting sensitive and confidential data of both customers and coworkers. This role will provide Information Security “blue team” threat intelligence, vulnerability remediation and logical security to prevent business interruptions in a fast-paced retail environment.

KEY RESPONSIBILITIES:

Work with security team, managed service providers, security tools, log sources and various teams to identify threats to Rent-A-Center and provide effective mitigations, compensating controls and methods to avoid business interruption.
Review and analyze access, network, and system logs and alerts in a hybrid-cloud environment for inappropriate or unauthorized access
Create detailed process documentation, share knowledge, and assist in raising the overall level of technical knowledge to improve processes and optimize usage of time and limited resources.
Support business initiatives by partnering with Information technology and non-technical staff to enhance security posture while supporting business needs.
Conduct regular reviews of systems to meet or exceed compliance requirements to ensure continuous monitoring of network, systems, and application security.
Promptly respond to all security incidents and provide thorough post-event analysis utilizing associated runbooks and incident response plans.
Interact with internal and external auditors as needed to ensure regulatory and policy compliance.
Identify and determine root causes of security violations and create comprehensive improvement plans for future event mitigation or business interruptions.
Verify and document the corrective actions to ensure application, data, and infrastructure security
Provide technical guidance and recommendations to co-workers about the risks and control measures associated with new and emerging information system technologies
Communicate with key groups (i.e. various lines of business and other technical teams) regarding potential threats, remediation efforts and all logical implementation steps
Keep up-to-date with emerging security threats, technologies, and systems
Track, analyze and mitigate Advanced Persistent Threats (APT), phishing and social engineering other security related threats.
Monitor, review, and provide security guidance for Network security tools and associated access mediums such as Network access controllers (NAC), gateway anti-malware and enhanced authentication
Create analytical detail-based reports for consumption by executive leadership; the ability to take highly technical processes and present it in easily understandable manner for non-technical staff.
Strong knowledge of core information security fundamentals such as but not limited to; Identity and access management, Multifactor authentication, least privilege, conditional access policies, firewalls rule process, Web application firewalls (WAF), Vulnerability management etc.
Security related knowledge of compliance requirements for large business; CCPA, PCI-DSS, Sarbanes-Oxley etc.
Assist in the preparation and periodic update of information security policies, architectures, standards, compliance requirements and other technical documents as needed as they relate to business operations and security.

JOB REQUIREMENTS:

Basic functional knowledge of Sarbanes-Oxley (SOX) and Payment Card Industry Data Security Standards (PCI-DSS) to monitor and enforce related controls.
5 or more years of Security Operations Team (SOC) or security information and event management correlation (SIEM) experience.
5 or more years of information security tool administration or cyber threat research and analysis experience
3 or more years of hands-on cloud security experience (AWS – Azure) and security related best practices.
In-depth knowledge of network stack, common protocols and commonly known ports
Demonstrated by means of experience or technical Certification for security business controls, strategies, methodologies as well as knowledge and experience with all of the following technologies: firewalls; intrusion detection; directory services; web access controls; advanced authentication methods; public key infrastructure (PKI); VPN, TCP/IP; anti-malware, single sign on; audit; diagnostics, and forensic tools.
Experience with change management process, Life-cycle management, and related T (Information Technology). service management systems
Demonstrated ability to create technical documentation utilizing industry recognized security tools.
Must have the ability to effectively communicate to all levels of staff and management, technical or non-technical.

PREFERANCE:

Bachelor’s degree in related field preferred
Preference given to Strong AWS Security knowledge
Relevant technical security certifications are a plus(Example: CISSP, GCIH, Security+, CEH, CCSP)
5 or more years relevant Information security work experience.
Experience and Functional working knowledge with some or all the following:
Enterprise antivirus deployment and management
Web application firewalls (WAFs)
RBAC (Role Based Access Control) and conditional access policy controls for cloud Environments
Identity and access management products
Enterprise vulnerability scanning tools
Certificate management and automation
Intermediate to advanced knowledge of Microsoft PowerShell
Familiarity with programming or scripting language
Prior Security Operations Center (SOC) or Network Operations Center (NOC) experience
Background in security incident response

Rent-A-Center

New Jobs

Cyber Security Analyst