Associate Senior Information Security Analyst

Evaluate, test, recommend, develop, and maintain information security policies, procedures, and systems across hardware, firmware, and software.

Monitor complex systems and respond to known and emerging threats through security event management and incident handling processes under supervision.

Design and configure various security systems and assess security risks, including emerging threats and compliance with security standards like ISO, PCI, HIPAA, and PII guidelines under guidance.

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent relevant work experience.

Typically minimum 2 years relevant experience including network operations, engineering, or system administration on Unix, Linux, MAC, or Windows and familiarity with security operations like intrusion detection and penetration testing.

Preferred professional certifications include CISSP, CISM, CISA, GSEC, Network+ or Security+ with typically minimum 4 years relevant experience.

Knowledge of industry standard security compliance programs such as PCI, SOX, GLBA.

Experienced in handling security incident responses and monitoring using security event management tools with ability to analyze security logs and triage events.

Capable of designing and configuring multiple security controls including network and application firewalls, data loss prevention systems, and remote access security under guidance.

Has working knowledge of risk assessment, emerging threat modeling, and compliance with ISO, PCI, and other security standards in a corporate environment under moderate supervision.