Cybersecurity Analyst I

Davis Wright Tremaine LLP•Seattle, WA

23h•$100,000 - $134,000•Remote

About The Position

This is an exciting opportunity to work for one of the top law firms in the U.S.! Davis Wright Tremaine LLP is looking for a Cybersecurity Analyst to join our team in our Seattle, Portland, San Francisco, Los Angeles, New York or Washington D.C. offices. This position offers the flexibility to be fully remote while working within reasonable commuting distance from any of our offices. The Cybersecurity Analyst is responsible for the ongoing protection of Davis Wright Tremaine's worldwide information assets, including its computers, networks, programs, and data, from unwanted cyber-attacks, cyber intrusions, and other threats. At Davis Wright Tremaine, you will find challenging assignments, opportunities for professional growth and community involvement, and a culture of inclusion. DWT fosters inclusiveness and authenticity. Regardless of position, everyone here has a voice and the support is unparalleled. On a typical day you will: Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture Be prepared to respond nimbly and effectively to possible cyber incidents Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems

Requirements

2+ years’ experience in a similar technology-based role
Demonstrated hands-on experience with network and computer technologies
GED or High School Diploma
Ability to communicate and collaborate effectively and professionally with all levels of a professional services organization
Strong interpersonal skills, ability to work in a fast-paced environment and in both team and independent settings
High degree of sensitivity to confidential matters
Must pass background investigation
Familiarity with risk management principles
Understanding of network protocols and the basics of TCP/IP
Rudimentary computer programming and scripting skills
Demonstrated abilities in problem-solving and analysis: identifies issues, analyzes information to assess root cause and relationships, risks, and potential risk responses; proven ability to synthesize and summarize complex data into concise recommendations and reports
Ability to successfully facilitate collaboration across multiple functions, departments and levels
Consistently delivers on commitments, deadlines and objectives while remaining in scope and leveraging appropriate tools, methods, frameworks, and professional standards
Ability to build trust and credibility with business partners and leadership while recommending initiatives, and identifying gaps and potential issues
Ability to work independently while representing the services of the department with the highest level of professionalism

Nice To Haves

Advanced education in cybersecurity, computer science, or engineering a plus

Responsibilities

Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System
Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture
Be prepared to respond nimbly and effectively to possible cyber incidents
Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood
Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities
Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors
Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems
Triage, investigate, respond to, and escalate security anomalies and alerts