Infrastructure Security Analyst

Versiti, Inc.•Dayton, OH

2d•Hybrid

About The Position

The Infrastructure Security Analyst will play a critical role in ensuring the security and integrity of our IT systems and networks. This position involves a balanced focus on IT Systems and Network Support and Cybersecurity with a concentration on Vulnerability Management. The ideal candidate will possess both technical expertise and strong analytical skills to identify, mitigate, and manage vulnerabilities while supporting the overall IT infrastructure. The candidate will thrive in a dynamic, team-oriented environment, where knowledge sharing, and continuous learning are encouraged. As an integral part of our collaborative team, the Infrastructure Security Analyst will work closely with various IT departments, including network operations, system administration, and application development. This role includes direct collaboration with the Senior Cybersecurity Engineer to ensure thorough analysis, identification, and mitigation of infrastructure vulnerabilities. Together, the team will address evolving cyber threats, communicate complex security concepts to stakeholders across all levels, and promote an organization-wide security culture while supporting Versiti's business and operational goals. This position values teamwork, encouraging information sharing and joint problem-solving to fortify the organization's defenses. This role is essential in building a resilient IT infrastructure that can adapt to evolving threats while supporting the organization's business objectives.

Requirements

Bachelor's Degree Computer Science, Information Technology, Cybersecurity, or a related field preferred
4-6 years Demonstrated experience installing, managing and troubleshooting Linux and/or Microsoft Server environments. required
4-6 years Experience with Enterprise Data Center Server and Network environments. required
4-6 years Experience in conducting vulnerability assessments and penetration testing. required
Understanding of patch management processes and tools required
Knowledge of common security frameworks (e.g., NIST, ISO 27001, CIS Controls) required
Strong analytical and problem-solving skills. required
Excellent communication skills, both verbal and written, with the ability to explain technical concepts to non-technical stakeholders. required
Strong attention to detail and ability to work independently as well as part of a team. required
Experience with ticketing systems and IT service management processes. required
Proficiency in network protocols, firewalls, VPNs, and security appliances. required
Experience with vulnerability assessment tools (e.g., Nessus, Qualys, Rapid7). required
Knowledge of operating systems (Windows, Linux) and cloud environments (AWS, Azure). required

Nice To Haves

Demonstrated experience with VMware Server and storage management. preferred
Familiarity with scripting languages (e.g., PowerShell, Python). preferred
Certified Ethical Hacker (CEH) desired
CISSP Certified Information Systems Security Professional desired
Microsoft Certified Systems Engineer (MCSE) preferred
Microsoft Certified Systems Administrator (MCSA) preferred
CompTIA Network+ Certification preferred
CompTIA Security+ Certification preferred
Experience with container technologies (e.g., Docker, Kubernetes) preferred
Familiarity with threat intelligence and incident response processes. preferred

Responsibilities

Provide technical support for IT infrastructure, including servers, networks, and cloud services.
Monitor system performance, troubleshoot issues, and perform regular maintenance on IT systems and document system configurations, changes, and procedures for future reference and compliance audits.
Collaborate with IT teams to implement and maintain secure network configurations and ensure compliance with organizational policies while assisting in the deployment and configuration of hardware and software as needed.
Respond to and resolve service requests and incidents in a timely manner.
Conduct regular vulnerability assessments and penetration testing to identify security weaknesses within IT systems and networks and collaborate with IT teams to develop and implement mitigation strategies for identified vulnerabilities.
Analyze vulnerability scan reports and prioritize remediation efforts based on risk assessment and monitor security alerts and incidents, responding to security breaches or threats as necessary.
Maintain up-to-date knowledge of the latest cybersecurity threats, vulnerabilities, and trends.
Utilize threat intelligence feeds and monitoring tools to proactively identify and mitigate potential security threats.
Provide recommendations for security improvements and help implement new security controls.
Performs other duties as required or assigned which are reasonably within the scope of the duties in this job classification.
Understands and performs in accordance with all applicable regulatory and compliance requirements.
Complies with all standard operating policies and procedures.