IT Security Analyst - Threat and Vulnerability Management Team

Bloomberg•New York, NY

6h•$155,000 - $190,000

About The Position

The IT Security Analyst will help ensure Bloomberg’s IT infrastructure and security processes are resilient against current threats. The role involves hunting for, exploit testing, analyzing, and assessing vulnerabilities across a wide range of technologies; working with technology partners to test assumptions about the security posture; and managing identified vulnerabilities through remediation. The analyst will collaborate with security engineering and incident response teams to shape the enterprise Threat and Vulnerability Management program’s strategic direction. The Threat and Vulnerability Management Team works with internal technical departments to protect Bloomberg systems and the data it processes, focusing on confidentiality, integrity, and availability. The team drives company-wide initiatives to improve security controls and expects analysts to exercise sound technical judgment, resilience, and composure when navigating difficult situations. The position is based in New York. The stated annual salary range is $155,000–$190,000, with benefits and bonus. Compensation may vary based on factors including location, experience, market conditions, education, and skills.

Requirements

At least 5 years of experience in IT operations, systems management, or IT security-related work.
Hands-on expertise with enterprise network architectures and Linux and Windows operating systems, system administration, or software development.
Knowledge of IT security and system-hardening best practices for operating systems, public cloud, web applications, network devices, and SDLC processes and concepts.
Understanding of enterprise networking concepts, architectures, protocols, segmentation, and access controls, and the ability to apply them to improve vulnerability-scanning strategy and coverage in a complex environment.
Knowledge of Active Directory best practices and security hardening.
Experience analyzing vulnerability findings from IT and security management tools.
Understanding of industry standards such as NIST, CVE, CPE, and CVSS.
Ability to interpret complex data sets and make informed, risk-based decisions.
Ability to effectively manage complex tasks, projects, and initiatives.

Nice To Haves

Solid understanding of risk management frameworks.
Experience with operational vulnerability scanners and attack surface or path management tools such as Rapid7, Qualys, Nessus, or Bloodhound.
Ability to learn and implement technologies quickly.
Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field.
At least 2 years of Python programming experience.

Responsibilities

Perform IT security assessments and work with security or IT professionals to assess the potential impact of vulnerabilities and determine appropriate mitigating controls.
Build partnerships with technical teams to promote vulnerability-management best practices across traditional infrastructure and cloud environments.
Understand business requirements and collaborate with business partners on solutions that meet security mandates and business needs.
Help standardize workflows, processes, procedures, and reporting.
Produce metrics and key performance indicators that demonstrate the effectiveness of enterprise remediation efforts.
Improve the design and usefulness of IT security management tools and solutions.