IT Security Analyst

Dexter Career•Elk Grove Village, IL

About The Position

We are seeking a skilled Information Security Analyst to identify, investigate, and mitigate potential security risks to protect our company’s information systems and computer networks. Information Security Analyst responsibilities include implementing and maintaining security measures (including CMMC 2.0), providing incident response, conducting system audits, and log reviews and vulnerability mitigations. Ideal candidates should be knowledgeable in areas such as encryption technologies, network protocols, Active Directory (both AD and Entra), PowerShell, and application security. The objective of the Information Security Analyst is to safeguard our company’s computer networks and systems by planning and carrying out security measures to protect against malware, hacking, and identity theft, and ensure all systems are compliant to applicable regulations.

Requirements

Bachelor’s degree in Network/software Engineering, preferably Cybersecurity and Information Technology
Proven work experience as an Information Security Analyst or similar role.
2-4 years of experience required.
Experience designing secure network, systems and application architectures.
Proficient in security technologies such as Vulnerability management, IDS/IPS, and endpoint protection.
Experience in disaster recovery technologies, and methods.
Knowledge of regulatory requirements and compliance issues affecting IT Security.
BSc degree in Computer Science, Information Technology, or relevant experience.
Must be a U.S. person (U.S. citizen, lawful permanent resident, or individual with protected status under U.S. immigration laws) due to ITAR requirements.
Access Control
Cloud Security
Computer Information Security
Cyber Security
Data Security
Endpoint Protection
Firewall Administration
Information Security Governance
IT Security Assessment
IT Security Audit
Security Analysis
Security Testing and Auditing
System Security
Vulnerability Assessment
Threat Intelligence Software

Nice To Haves

Professional certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) is a plus.
Prior work in regulated industries such as defense or healthcare is a plus.

Responsibilities

Responsible for ensuring the security of the organization’s systems and information assets.
Develop and implement security systems, guidelines and strategies.
Protect against unauthorized access, use, disclosure, disruption, modification, and or destruction.
Conducts audits and risk assessments.
Evaluates internal operations and controls and makes recommendations based on the findings.
Migrates non-compliant environment to compliant environments.
Ensure compliance with data protection guidelines and applicable laws.
Designing and implementing secure network solutions to defend against advanced cyber threats, supporting CMMC 2.0 implementation
Reviewing and monitoring existing network systems to ensure they are functioning securely
Testing systems for vulnerabilities and identifying potential security risks
Providing input and insight into organization-wide best practices for IT security
Investigating intrusion incidents, assisting with conducting forensic investigations, and mounting incident responses
Performing routine audits of systems and software to ensure compliance with established security protocols
Installing, troubleshooting and updating security software and hardware
Collaborating with the IT team to maintain security configurations and disaster recovery plans
Providing technical advice to colleagues and other staff within the company about security-related issues
Staying up to date with the latest security systems, standards, authentication protocols, and products
Documenting any security breaches and assessing their damage