Endpoint Security Analyst

Caterpillar•East Peoria, IL

3d•Onsite

About The Position

Caterpillar’s Cybersecurity Team is seeking a Security Analyst to join our Caterpillar IT Cybersecurity Team. In this role you will have the opportunity to deploy, manage and support products and tools that protect Caterpillar resources from cybersecurity threats. As a member of this team, you will assist with discovering, assessing, and addressing new security challenges facing the organization. Ideal candidates would be highly motivated and technically proficient, as well as capable of participating on a team to complete tasks, assignments, and projects in both individual and cooperative group-based contexts.

Requirements

Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.
Knowledge of the tools and processes for maintaining endpoint security; ability to design and implement security programs to prevent data loss and access intrusion from external sources.
Strong experience in Enterprise Tool Support (AV, EDR, Vulnerability Scanner, SCCM, etc)
Familiarity with infrastructure and services used to support secure, scalable applications, whether on-premises or in hybrid/cloud environments.
Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.
Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.
Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.
Knowledge of tools, methods, and techniques of requirement analysis; ability to elicit, analyze and record required business functionality and non-functionality requirements to ensure the success of a system or software development project.
Knowledge of the features and facilities of systems; ability to integrate and communicate among applications, databases, and technology platforms.
Experience with Host Group, Prevention Sensor, and Policy Configuration
Exposure to SQL, PowerShell or Python Scripting, Command Line Interfaces
OS Administration: Linux, Windows, MacOS (command line, services, data manipulation, installation, and system operation)
Experience with Windows/MacOS Frameworks
Experience in MacOS security and compliance management, including continuous monitoring and automated remediation for endpoints
Remote Administration Tools
Installing/Removing/troubleshooting MSI packages
Knowledge of technical writing; ability to write technical documents such as manuals, reports, guidelines or documents on standards, processes, and applications.
Experience in maintaining system documentation in an enterprise tool (i.e. SharePoint, OneNote, etc) for group dissemination.
Strong communication skills, with the ability to document technical solutions and present findings to technical and non-technical stakeholders.
Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, plain language appropriate to the audience.
Knowledge of antivirus/malware attacks and the defenses used; ability to defend and prevent electronic threats, theft, and attacks.
Relevant cybersecurity certifications or training in Endpoint Detection and Response.
Experience in utilizing various commercial vulnerability notification tools to analyze vulnerabilities and devise solutions for remediation.
Bachelor's degree in a relevant field or equivalent experience.

Responsibilities

Support Caterpillar’s Endpoint Detection & Response (EDR) (including Linux/Ubuntu server), Identity Management, Vulnerability Management / Attack Surface Visibility / Response Actions environments.
Promote automation for monitoring and remediation of client health issues, monitoring of EDR Infrastructure, vulnerability remediation, and aligning to Enterprise ITSM change and control procedures.
Be a liaison between Corporate Cybersecurity, and our business partners to help understand their operations and maintain global security processes, while building collaborative relationships, provides expertise, technical guidance, and security awareness as needed.
Collaborate with engineering, architecture, and SOC teams to implement detection logic and improve threat visibility.
Contribute to the development of automated detection and response capabilities.
Be a part of continuous vulnerability lifecycle management within the Caterpillar environment including the collection, reporting and assessment of impact for vulnerability related data from external and internal sources.
Serve as liaison between Corporate Cybersecurity and our business partners to help understand their operations and maintain global security processes, while building collaborative relationships.