Cybersecurity Analyst

Grupo Ferré Rangel • Guaynabo, PR

7h • Onsite

About The Position

Grupo Ferré Rangel is committed to bringing passion and customer focus to the business. The Cybersecurity Analyst position is a Full-time, Regular position. This role involves conducting regular security assessments and penetration tests, developing and implementing security controls, investigating suspicious activities, and ensuring compliance with regulations like PCI and SOC2. The analyst will manage and maintain security tools, create training modules, respond to alerts, and facilitate information exchange with other IT departments. The position also requires staying updated on cybersecurity trends and complying with company policies and applicable laws. Additional duties may be assigned based on education and experience.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 2+ years of experience in information technology roles.
• Proven experience in cybersecurity analysis, incident response, and risk management.
• Strong knowledge of networking protocols and security technologies.
• Highly knowledgeable about computers, including networks, operating systems, applications, and web apps.
• Experience with security tools such as SIEM, IDS/IPS, firewalls, and vulnerability scanners.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively.
• Excellent multitasking skills and ability to manage multiple projects.
• Proven ability to prioritize and handle multiple tasks at once; strong attention to detail is a must.
• Proven organizational skills, with experience working in a fast-paced and high-volume environment.
• Ability to identify solutions independently and make sound business decisions.
• Experience utilizing Microsoft Office products (MS Word, Excel, and Outlook).
• Bilingual (writing, conversational and reading comprehension in English and Spanish)

Nice To Haves

• Certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), CISSP, CISM, or GIAC certifications, and membership in recognized cybersecurity professional organizations (e.g., ISACA, (ISC)²), are preferred.

Responsibilities

• Conducts regular security assessments and penetration tests to proactively identify weaknesses in our systems and infrastructure.
• Develops and implements security controls and measures to mitigate risks and enhances the overall security posture.
• Promptly identifies and investigates any suspicious activities that may signal a security breach, while performing a fast analysis and correlation of events to ensure timely resolution of potential issues.
• Conducts weekly system scans to uphold compliance with PCI regulations and policies. Additionally, it ensures adherence to other regulatory standards, such as SOC2, necessitating comprehensive understanding of processes, documentation, and related requirements.
• Guarantees optimal performance and configuration of all security tools and systems by managing and maintaining their settings. This includes removing redundant servers and computers, verifying that all authorized users have appropriate access permissions to applications and systems, and ensuring effective implementation of endpoint protection policies, including handling any necessary exceptions.
• Assists in the creation of tailored training modules and simulated attacks, utilizing customizable templates to educate employees within the company, and creating awareness of cybersecurity threats.
• Emphasizes the importance of ongoing updates to ensure all users are promptly informed of cybersecurity protocols, especially with the arrival of new personnel.
• Responds to alerts through various channels including email, the Help Desk ticketing system, and any other notifications from fellow employees, prioritizing actions based on the criticality of each alert.
• Facilitates information exchange between analysts and other IT departments. In the event of a new vulnerability affecting a product managed by another team, ensure prompt sharing of relevant details, and recommend viable alternatives to address the issue.
• Checks that all scheduled tasks and updates perform successfully, as well as coordinating the updates with Infrastructure personnel so that they are performed without affecting the operation.
• Collaborates with cross-functional teams to implement security best practices and ensure compliance with relevant regulations and standards.
• Stay up to date with the latest cybersecurity trends, threats, and technologies to continuously improve our security posture.
• Complies fully and consistently with the Company's standards, policies, and procedures and the local and federal laws applicable to our industry, business, and employment practices.
• May perform other duties and responsibilities as assigned, in accordance with the education and experience requirements contained in this document.

Benefits

• Equal opportunity employer status
• Celebrates diversity and is committed to creating an inclusive environment for all employees
• Consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, disability, age, or veteran status

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level