Information Security Analyst - Jacksonville

Stillwater Insurance Group•Jacksonville, FL

16d•Onsite

About The Position

Stillwater Insurance Group is seeking an Information Security Analyst for an in-office position in Jacksonville, Florida. The role focuses on researching, testing, deploying, and maintaining security solutions for the corporate network; developing and reviewing security policies and procedures; supporting security in IT projects; conducting compliance audits; monitoring logs and vulnerability scans; and responding to security events. The analyst will work with the Information Systems Web Development team on Web Application Firewall rules and policies, provide remediation guidance, promote security awareness, and review access needs, security violations, and programming changes. The position may require work outside normal business hours to diagnose issues and implement product releases without interrupting normal workflows. The ideal candidate has a bachelor's degree in computer science or relevant experience, at least three years of information security experience or five years of IT-related experience, and knowledge of security monitoring, incident response, vulnerability management, endpoint protection, web security, penetration testing, and networking. Strong analytical, communication, prioritization, documentation, and mentoring skills are also sought.

Requirements

Five years of IT-related experience or at least three years of information security experience.
Bachelor of Computer Science or relevant experience.
Knowledge of log management and SIEM tools such as Splunk.
Knowledge of IDS/IPS, including Fortinet.
Knowledge of incident response and forensics.
Ability to identify and mitigate information security vulnerabilities using scanning tools and explain how to avoid them.
Knowledge of vulnerability management tools such as Rapid7 Nexpose, Qualys, or Tenable.
Knowledge of performance monitoring tools such as PRTG or New Relic.
Knowledge of endpoint protection tools such as FortiEMS, FortiClient, Cylance, GPO, and deployment tools.
Knowledge of web filters and Web Application Firewalls such as FortiWeb.
Experience with penetration-testing tools, testing, and techniques.
Understanding of network technology, including TCP/IP, firewalls, switches, and routers.
Analytical and problem-solving abilities.
Good written, oral, and interpersonal communication skills.
Ability to prioritize tasks and projects effectively.
Attention to detail.
Ability to document solutions and provide training and mentoring.
Ability to work outside normal business hours when needed.

Nice To Haves

CompTIA certifications such as Network+, Security+, PenTest, CySA+, or CASP+.
GIAC certifications such as GSEC, GCIA, GCFE, GCED, or GPEN.
EC-Council certifications such as CEH, CND, ECSI, CNDA, or CHFI.
Microsoft Certified Systems Administrator: Security.

Responsibilities

Research, test, deploy, and maintain information security solutions for the corporate network.
Develop, document, and review information security procedures and policies.
Participate as a security expert in IT-related projects and provide direction and mitigation solutions.
Perform security audits for PCI and other compliance entities as required.
Work with the IS Web Dev team on Web Application Firewall rules and policies.
Monitor logs and vulnerability scanning solutions and provide remediation guidance.
Work outside normal business hours when needed to diagnose issues and implement product releases without interrupting normal workflow, including responding to security-related events.
Stay current on IT security trends, news, and threats.
Promote security awareness to users to support server and network efficiency.
Review access needs, security violations, and programming changes with end users to maintain compliance.
Document solutions and provide training and mentoring.