Cybersecurity Analyst

Regional Water Authority•New Haven, CT

1d•$67,885 - $93,642

About The Position

Under general supervision from the Enterprise Security Manager, develops cyber-intelligence solutions to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce, and web-based systems. Supports technologies deployed across application, network/perimeter, data, endpoint, identity & access, and mobility domains. Research based on security logs for attempted or successful efforts to compromise systems security and designs countermeasures. Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information and systems.

Requirements

Bachelor’s degree in computer science or related field
Proficiency in network protocols, operating systems, security tools (firewalls, intrusion detection systems, SIEM), scripting languages, and data analysis techniques
Ability to analyze complex data, identify patterns, and draw accurate conclusions about potential threats
Effectively troubleshoot security incidents and develop solutions to address vulnerabilities
Clearly communicate security risks and recommendations to both technical and non-technical audiences
1-3 years working as a Cyber Security professional.

Nice To Haves

Industry certifications such as: CompTIA Security+, GIAC, CCCA, CISSP, certifications preferred

Responsibilities

Under general supervision, supports RWA Information Security governance, risk management and compliance processes.
Facilitate security assessments driven by the Technology Leadership team, Enterprise Security Manager and Cybersecurity Governance Team.
Act as a cyber security liaison between the internal and external Enterprise Information Security teams and the supporting RWA business functions including SCADA team, RWA IT team and other functions.
Assist in the speed to delivery and education while aligning teams to Information Security policies, procedures, and standards.
Review centralized event logs for cyber related events, remediate when necessary.
Collaborate and build partnerships that will drive the reduction of residual risk and improve the overall Information Security posture for the RWA by implementing security protocols and initiatives in the cyber security roadmap.
Identify and execute upon opportunities and incorporate process improvements in the cyber arena.
Lead key enterprise security project activities through meeting facilitation, managing scope, managing issues and risks, and communicating progress.
Facilitate security assessments driven by the leadership team, Enterprise Security Manager and Cybersecurity Governance Team.
Assist in internal and external audits as assigned.
Assist in audit vulnerability remediation plan and recommendations.
Keep enterprise assets such as servers, switches and firewalls updated with proper firmware version -Configure partition on new servers for OS according to cybersecurity best practices.
Assist with network topology and security drawings to reflect accurate RWA network and security infrastructures.
Create and apply security addresses and groups for policies on firewalls in order to reduce potentially malicious traffic into the RWA network.
Create VLANs and trunks on switches as part of supporting RWA network and cybersecurity operations.
Create cyber news flyers via researching articles and other useful sources of information to deliver generalized cyber best practices, as well as things to be on the lookout for, to RWA employees.
Organize Cyber Governance meetings with actions that drive cyber security best practices.
Coordinate phishing exercises and retarget users after phishing exercises – training users and providing them with clear guidance on what to look out for so as to avoid future phishing emails.
Create and test standard operating procedures for cyber-related tasks. Should be clear and concise enough to be repeated by others not knowledgeable about the procedure.
Strive to improve cybersecurity knowledge. This could include studying for certifications or delving deeper into research on day-to-day cyber tasks.
Under the guidance of technology leadership team and enterprise security manager enable SOC (Security operations center) functions.