Information Security Analyst III

The Vanguard Group • Wayne, PA

184d • Hybrid

About The Position

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. The Information Security Analyst III will assist and respond independently to cyber security alerts, cyber incidents, or related security investigations, identifying real-time complex attack patterns and suggesting mitigation strategies. The role supports processes, tools, and measures to monitor and detect compromises, risks, vulnerabilities, network security threats, tools, and tactics used by modern and emerging threat actors. It also involves developing, managing, maintaining, and enhancing security controls for the security platforms, monitoring the network environment for new and evolving cyber threats, conducting penetration testing, vulnerability assessments, and threat modeling, and collaborating with IT and business teams to ensure effective incident response.

Requirements

• Minimum of three years related work experience.
• Two years experience in threat analysis.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Must obtain CISSP within one year of hire.

Responsibilities

• Assists and responds independently to cyber security alerts, cyber incidents, or related security investigations.
• Identifies real-time complex attack patterns and suggests mitigation strategies.
• Supports the processes, tools, and measures to monitor and detect compromises, risks, vulnerabilities, and network security threats.
• Facilitates security operations and incident response technologies and methodologies.
• Develops, manages, maintains, and enhances security controls for the security platforms.
• Monitors the network environment for new and evolving cyber threats and provides preventive and remedial solutions.
• Identifies malicious activity by performing analysis on logs, traffic flows, and other investigative detective activities.
• Conducts penetration testing, vulnerability assessments, and threat modeling.
• Evaluates risks and makes recommendations.
• Performs analysis and provides written assessments focused on threats, vulnerabilities, and technologies relevant to Vanguard infrastructure.
• Collaborates with IT and business teams to ensure prompt and effective distribution of findings to address incidents.
• Provides department support to the business on enterprise-wide security initiatives and projects.
• Participates in special projects and performs other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree