Cyber Security Analyst

Holland & Hart Staff•Boise, ID

19h•Hybrid

About The Position

The Cyber Security Analyst will report to the Information Security Manager and has responsibility for assisting with risk assessments, enterprise vulnerability assessments, operating security software, evaluating third party risk, and designing controls for AI systems. Utilizes and analyzes metrics to produce recommendations for future controls and improvements. Responds to alerts, contains cyber security incidents, and routinely interfaces with personnel throughout H&H. This position requires advanced knowledge of information technology verticals across the enterprise, the ability to quickly ascertain the associated security controls, and the ability to positively influence others to implement the controls.

Requirements

Bachelor’s degree in information technology, information systems, computer science or computer engineering.
Three (3) years of cyber security experience.
Minimum of one security technical certification such as SSCP, GSEC, CEH and Security+.
Must have direct experience in the following: Vulnerability management and how to manage risk using the MITRE Attack Framework including threat intelligence sources.
Maintaining and performing analysis using Security Event and Incident Management (SEIM) systems.
Digital forensics, reverse malware analysis and incident response.
Analyzing events using EDR/XDR and anti-malware systems.
Performing phishing and social engineering testing.
Active Directory and Auditing Systems.
Reviewing firewall rules and configuration.
Cloud Security Architecture.
Understand IT security frameworks (NIST 800 series and ISO 27001), compensating controls and how to work with members of IT to implement the corresponding controls.
Understands how to quantify vendor risk.
Understands and may analyze contractual agreements, privacy policies, and other third-party documentation.
Aptitude and a mindset for security.
Self-learner with an ability to research new security trends.
Advanced understanding of how computers work and how they may be exploited.
Understanding of IT Security best practice industry standards and how they are applied.
Capable of performing one or more phases of low-complexity projects.
Can forecast budget for low-complexity projects.
Excellent Microsoft Office skills including Visio.
Ability to write scripts and generate reporting from security systems.
Strong adherence to integrity & confidentiality.
Must be collaborative, creative, and driven with a proven ability to be a team player.
Able to think strategically, develop solutions quickly and implement efficiently.
Excellent verbal, written, and overall communication skills.
Excellent analytical skills.
Detail oriented to ensure that the success of implementations is paramount.
Strong analytical, evaluative, and problem-solving skills with a keen attention to detail.
Self-starter with the ability to multi-task and work in a very fast paced environment.
Exceptional client service demeanor and interpersonal skills required.
Must effectively prioritize work/projects and execute tasks in a high-pressure environment

Nice To Haves

Experience maintaining physical security systems and IoT systems is preferred.

Responsibilities

Identify and document security and privacy risk.
Using knowledge of best practice, will identify methods to control the risk and assist with control implementation.
Interface with MSS and EPP vendors regarding technical settings, perform analysis of alerts, and remediate threats.
May interface with vendors to budget and plan for future security controls.
Assist with developing and maintaining information and privacy security policies, procedures, standards, and guidelines.
May install and administer security protection devices including end point protection (EPP) and SIEM technology.
Evaluate suspicious threats and activities in email and systems, using Endpoint Detection and Response (EDR) tools.
Utilize malware analysis and sandboxing tools to analyze suspicious events.
Leverage security tools to analyze suspicious links, email and documents.
Implement remediation controls to block suspicious email and other threats.
May evaluate and analyze events using Security Event and Incident Management (SEIM) tools.
Will develop reporting from SEIM and other devices.
Assists in developing and implementing Security Awareness and Phishing Awareness campaigns.
Through analysis of campaign data, will recommend addition controls to improve security.
Assist in generating metrics and Key Performance Indicators (KPIs) to improve security decision making, such as vulnerability metrics.
Review and evaluate desktop, server, and other device configurations against CIS standards and work with administrators to harden systems.
Inform others within IT Security and IT Management regarding security issues.
Assist with routine penetration testing and vulnerability assessments against applications, systems, and networks.
Performs vulnerability testing of wireless infrastructure in concordance with standards and requirements.
Will integrate threat intelligence sources with vulnerability management processes.
May conduct third party risk assessments and audits through application of established criteria.
May evaluate and propose controls for AI systems.
Identify methods to document and track third-party risk and get third party commitment to implement risk controls.
May conduct privacy impact assessments of third parties using established processes.
Ensures that proper documentation for new and existing third-party relationships is properly completed, maintained, and retained.
Maintains vulnerability management program and scanning engines.
Maintain an advanced working knowledge of emerging security trends including the latest attack methods, vulnerabilities, and remediation techniques.
Participate with client audits and assessments to ensure the firm’s security and privacy program meet client expectations.
Routinely interfaces with the CISO, DPO, IT Security team, IT Operations, IT Applications, H&H Legal, and third parties to determine the applicable obligations, initial and on-going risks, recommends mitigations, and tracks risks to closure.
Provides evaluation of suspected malware and provides recommendations of remediation.
Provides recommendations on physical security risks and controls.
Supports and provides recommendations for access controls for applications, systems, and networks.