Intellibee Inc
Overview
IT Security Analyst — Romulus, MI, US
Responsibilities
Protect data and information systems against unauthorized access, modification, or destruction
Maintain and monitor data security
Manage network, intrusion detection and prevention systems
Respond to and analyze security incidents
Perform security awareness training
Prepare status reports on security matters to develop security risk analysis scenarios and response procedures
Responsible for the tracking, monitoring and resolution of security incident tickets
Audit and report on user accounts and access permissions
Provide direct support to the business and IT staff for security related issues
Recommend and implement appropriate cybersecurity tools and countermeasures
Assist in the development and documentation of security procedures and business continuity plans
Perform internal vulnerability security scans, monitor Web Portal from support services that conduct monthly external network vulnerability scans, analyze report data, and create, assign, and monitor technical service tickets to responsible technicians for the address and remediation of any discovered vulnerabilities
Coordinate and participate in the administration of Disaster Recovery and Business Continuity plans and tests. Track, report, and document results
Participate as a member of the Technology Services Cyber Incident Response Team (CIRT). Analyze data and incidents and develop reports and brief on findings
Maintain an advanced knowledge set of current PCI-DSS requirements. Monitor controls and practices to assure continuous alignment to PCI-DSS Compliance. Assist the Technology Services Security Manager in annual PCI-DSS Attestations
Qualifications & Skills
For consideration, the candidate must meet the following minimum requirements
1-5 years’ experience in information systems security (Cyber security systems monitoring, Incident response, threat hunting)
Familiarity with security threats involving devices, networks, and systems as well as solutions that prevent, detect, and respond to those threats
Familiarity with current cybersecurity technologies such as firewalls, proxies, network and host-based intrusion prevention, data loss prevention, vulnerability assessment, security information/event management, endpoint security, anti-virus/anti-malware, etc.
Must demonstrate knowledge in threat hunting across a variety of data sources including writing custom SIEM queries, EDR queries, and other technologies
Familiarity with security intelligence and research methods
Knowledge of Information Security best practices
B.S. in Computer Science, Engineering, Information Systems, or equivalent experience preferred
Operational knowledge of web/email applications and their potential vulnerabilities
Operational knowledge of operating systems and their potential vulnerabilities
CEH, CASP, or SANS GSEC preferred
#J-18808-Ljbffr
Responsibilities
Protect data and information systems against unauthorized access, modification, or destruction
Maintain and monitor data security
Manage network, intrusion detection and prevention systems
Respond to and analyze security incidents
Perform security awareness training
Prepare status reports on security matters to develop security risk analysis scenarios and response procedures
Responsible for the tracking, monitoring and resolution of security incident tickets
Audit and report on user accounts and access permissions
Provide direct support to the business and IT staff for security related issues
Recommend and implement appropriate cybersecurity tools and countermeasures
Assist in the development and documentation of security procedures and business continuity plans
Perform internal vulnerability security scans, monitor Web Portal from support services that conduct monthly external network vulnerability scans, analyze report data, and create, assign, and monitor technical service tickets to responsible technicians for the address and remediation of any discovered vulnerabilities
Coordinate and participate in the administration of Disaster Recovery and Business Continuity plans and tests. Track, report, and document results
Participate as a member of the Technology Services Cyber Incident Response Team (CIRT). Analyze data and incidents and develop reports and brief on findings
Maintain an advanced knowledge set of current PCI-DSS requirements. Monitor controls and practices to assure continuous alignment to PCI-DSS Compliance. Assist the Technology Services Security Manager in annual PCI-DSS Attestations
Qualifications & Skills
For consideration, the candidate must meet the following minimum requirements
1-5 years’ experience in information systems security (Cyber security systems monitoring, Incident response, threat hunting)
Familiarity with security threats involving devices, networks, and systems as well as solutions that prevent, detect, and respond to those threats
Familiarity with current cybersecurity technologies such as firewalls, proxies, network and host-based intrusion prevention, data loss prevention, vulnerability assessment, security information/event management, endpoint security, anti-virus/anti-malware, etc.
Must demonstrate knowledge in threat hunting across a variety of data sources including writing custom SIEM queries, EDR queries, and other technologies
Familiarity with security intelligence and research methods
Knowledge of Information Security best practices
B.S. in Computer Science, Engineering, Information Systems, or equivalent experience preferred
Operational knowledge of web/email applications and their potential vulnerabilities
Operational knowledge of operating systems and their potential vulnerabilities
CEH, CASP, or SANS GSEC preferred
#J-18808-Ljbffr