Information Security Analyst - Mountlake Terrance, WA
About The Position
The Information Security Analyst will work directly with the Information Security Manager to improve Mindful Therapy Group's internal security and IT infrastructure. This role is expected to have experience and understanding of defensive (blue team) security best practices, with the ability to immediately perform audits and investigations for potential security threats. Additionally, this role is expected to execute large, complex projects with guidance from the Information Security Manager. The Information Security will also work together with the greater Operations team to be an important member for escalated security and technology support requests. This role will regularly collaborate on internal, cross-department projects and will work with external vendors. This is a full-time position that is fast paced with ample opportunities to learn and grow.
Requirements
- Strong understanding of “blue team” security concepts and practices such as log analysis, executing audits, compliance, and risk assessments.
- Proficiency with SIEMs, networking, and servers on prem and in the cloud.
- Familiarity with scripting or coding with the ability to write simple automations and perform API calls in at least 1 language. Specifically, PowerShell, Bash, Golang, C#, or Python are a plus.
- Basic understanding of cloud architecture such as Azure, AWS, or GCP. Azure specifically is a plus.
- Ability to independently investigate, learn, and solve technical issues without direct supervision.
- Professional and concise verbal and written communication skills with the ability to adjust based on the target audience (e.g. customers, internal staff, business partners, and external vendors).
- Familiar with HIPPA compliance and other compliance frameworks (i.e. ISO, NIST, CIS, etc.).
- Ability to collaborate effectively and tactfully within diverse teams and with stakeholders.
- Experience with Apple and Microsoft ecosystems.
- 2 years of experience in defensive security such as a blue team or security operations center (SOC).
- 4 total years of technology experience or a bachelor’s degree in IT Security or an equivalent combination of certifications.
- Ability to work outside standard business hours to respond to critical security incidents and to execute changes that cannot be deployed during working hours.
- Personal electronic device (i.e. smartphone) to receive and respond to urgent security alerts.
- Ability to participate in an on-call rotation and carry/answer a work phone per the on-call schedule.
- Personal vehicle to travel between worksites.
- Capable of lifting 50 lbs.
Nice To Haves
- Working experience with CrowdStrike is a plus.
- Security+, SSCP, CISSP, or other cybersecurity certifications are a plus.
Responsibilities
- Audit systems, networks, and security logs during incidents and outages to remediate and determine root cause.
- Integrate logging from existing infrastructure and SaaS solutions to a centralized SIEM.
- Develop scripts and automations to streamline the detection and alerting of incidents and outages.
- Provide tier 2/3 technical support for troubleshooting and issue resolution.
- Drive security and infrastructure projects including creating project plans, drafting communications, and consulting with internal stakeholders.
- Collaborate with external vendors on technology and security initiatives.
- Provide recommendations to the Information Security Manager on improvements or when identifying gaps on internal security practices.
- Update and maintain security controls in cloud admin portals such as Azure, M365, Google Cloud Platform, etc.
- Draft updated security policies, procedures, guidelines, and training courses in collaboration with Information Security Manager.
- Draft recaps for information security incidents.
- Perform annual security compliance audits for CIS benchmarks and HIPPA compliance.
- Complete application security reviews for new software solutions and application requests from employees.
- Perform updates to on-prem and cloud systems and networks.
Benefits
- 75% coverage of Health, Dental & Vision benefits plan
- 401(k) savings plan with employer matching upon eligibility
- 8 paid holidays a year
- 15 PTO days accrued in first year
- Professional and career development opportunities
- Compensation evaluated consistently and opportunities for growth
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
