Title: Cyber Security Analyst

Position Type: 6+ Months Contract

Location: 3 days onsite and 2 days remote in New York, NY 10020 (Hybrid Role)

Description:

He/she/they are responsible for security monitoring, responding to alerts and events, privilege management, vulnerability assessments, developer security program and network security initiatives. This Cyber Security Analyst will also be creating, tuning, and compiling metrics for security reporting, along with maintaining documentation for security related processes and procedures. There will be a focus on the firm's cyber security preparation to improve our ability to identify threats in the environment and to sustainably protect and manage them.

Responsibilities:

Provide reporting for application security projects. Coordinate with global and local teams to strengthen the program around application security, vulnerability assessments and remediation, oversee updates, and strengthen compliance around the use of approved tools and best practices - secure coding guides.
Strong network security architecture skills are required.
Provide support for cyber security incidents, action plans, findings, and audit points.
Develop and maintain relationships with external support groups such as the Cyber incident response team/penetration testers and other security vendors.
Off-hour availability during security incidents and relevant emergent conditions
Oversee the enforcement of security policy especially with respect to engineering tasks and duties like firewall rules, gateway configurations, NAC configuration, IDS/IPS, endpoint security tools etc.
Technical management of Qualys vulnerability assessment platform
Develop and manage metrics and performance through tracking, reporting and active engagement with management for continuous improvement of our security landscape. Develop horizontal view of risk posture across multiple technology domains.

Required:

BA/BS in information Security and At least two years of experience in systems, network, and/or application security with a focus on network and application security
Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the ability to unit test remediations with exploits tools
Good communication and presentation skills and Sense of ownership and drive
Knowledge of network security, system security, common attack patterns and exploitation techniques
Organizational and time management skills, attention to detail and ability to manage priorities
Able to proactively identify risk and drive remediation, assist with automation and efficient controls design
Familiarity with security and IT Risk frameworks (COBIT, ISO, NIST as well as FFIEC handbooks)
Familiarity with incident response and crisis management processes
A team player who can work with and cooperate with head office and local cyber security teams (first line of defense) and Information Security Group/Compliance (Second Line of defense) to share information and create a global view of security status
Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP etc.)
Experience with logging software, SPLUNK and/or other SIEM tools; with vulnerability assessment tools like Qualys; log and packet analysis tools and techniques like Wireshark; and with reporting tools such as PowerBI OWASP application security framework and information security frameworks (ISO27002,NIST CSF)

The Xela Group

New Jobs

Cyber Security Analyst