Information Security Analyst Senior

ECMC Group•Minneapolis, MN

19h•Hybrid

About The Position

The Cloud Security Analyst Senior is responsible for ensuring the security of our enterprise and cloud infrastructure. This role involves developing and implementing security measures, monitoring for potential security breaches, and responding to security incidents. The Cloud Security Analyst Senior will work closely with Senior IT and IT Security staff to ensure compliance with security policies and best practices. In addition, this role is responsible for monitoring and responding to security information events across multiple locations throughout the United States on a 24x7 basis, as needed. This position is classified as hybrid and requires attendance on designated in-office days.

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity or related field; or an additional 2 years of experience in lieu of degree
5+ years of experience in cloud security or related field
Strong knowledge in Active Directory User Groups, Microsoft Exchange and service management systems
Strong knowledge of cloud platforms (AWS, Azure, and Google Cloud)
Strong experience with security tools and technologies (e.g. firewalls, intrusion detection)
Must be able to work extended hours, including nights and weekends, to complete assignments, and provide 24/7 operations support when necessary

Nice To Haves

Knowledge of student loan and/or financial services industry
ISC2 SCCP, GIAC certifications, CompTIA Security+, AWS Associate of Solution Architecture, AWS Security Specialty Certification or similar certifications preferred

Responsibilities

Investigates and resolves level 2 information security events and escalates as needed to engineers for further triage.
Designs, implements, and manages security measures for cloud-based systems.
Conducts regular security assessments and audits.
Collaborates with IT and development teams to ensure secure deployment of applications.
Troubleshoots domain accounts, business application identities and infrastructure system accounts through the entire lifecycle (creation, modification, deletion) throughout the enterprise.
Responds to inquiries regarding logs and reports of domain controllers, business applications and infrastructure systems.
Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security procedures, and systems.
Assists and executes, in partnership with engineers, the configuration of correlation and workflow rule sets as needed to counter current and future information security threats.
Assists with creating and maintaining department and enterprise security documentation including policies, standards, guidelines, procedures, designs and solution architectures.
Investigates and resolves level one security incidents and escalates to engineers for further triage.
Assists with resolution of request/fulfillment tickets for assigned security systems.
Assists with tuning security systems so events and alarms provide optimal value.
Participates in on-call rotation during business hours.
Works with internal and external project managers to complete projects on time and leads or participates in IT projects to provide information security expertise, guidance, or training.
Participates in compliance audits such as FISMA reviews, SOC audits, etc.
Stays current on the latest cloud security threats, vulnerabilities, and trends.
Performs other duties as assigned.

Benefits

Medical, dental, and vision insurance plan options, with a generous employer subsidy.
Company paid life & disability insurance
Pre-tax flexible spending accounts
Robust wellness programs
Generous 401(k) plan with a company match up to 6% and additional discretionary contribution potential
Holiday time off
Paid time off accrual starting at 20 days/year
Commuter subsidy
Tuition reimbursement up to $10,500/year for approved programs
Student loan payment reimbursement up to $4,800/year