Security Analyst II

Amerisure Mutual Insurance•Farmington Hills, MI

7d•Hybrid

About The Position

The Security Analyst II is responsible for monitoring, analyzing, and responding to security incidents and threats to safeguard Amerisure's digital information. This role focuses on threat detection, vulnerability assessments, and implementing security protocols to protect the network, files, user accounts, and sensitive information. The Security Analyst provides knowledge in cyber security governance and cyber threat management, staying informed on the evolving threat landscape and collaborating with business units and IT to identify, prioritize, and mitigate risks effectively.

Requirements

Bachelor’s degree or equivalent combination of education and experience.
2 years security experience.
Working knowledge of firewalls, VPNs, IDS/IPS, network monitoring, and traffic analysis.
Knowledge of frameworks such as NIST, ISO 27001, and COBIT
Understanding cryptographic techniques and protocols (SSL/TLS, SSH, PKI).
Experienced in cybersecurity incident response, breach containment and recovery processes.
Staying current with evolving threats, technologies, and security protocols.
Understanding types of malware, detection techniques, and analysis tools.
Experience with Security Information and Event Management (SIEM) systems (e.g., FortiSIEM).
Knowledge of Windows, Linux, and macOS, including their security configurations.
Implement detailed instructions for securing cloud environments like AWS and Azure
Experienced in conducting third-party cyber risk assessments.
Can follow DevSecOps practices and make improvements to existing process.
Knowledge of authentication, authorization, SSO, MFA (Okta) and IAM (SailPoint)
Managing endpoint detection and response (EDR) tools.
Apply project management, Agile practices and principles and lead stand-ups.
Clear articulation of security policies, risks, and recommendations to non-technical stakeholders.
Working closely with IT teams, developers, and management.
Provide on-going, effective cybersecurity awareness program for the entire organization.

Nice To Haves

Professional Certification (CISSP; CEH; CISM; CRISC; CompTIA Security+)

Responsibilities

Monitor SIEM (Security Information and Event Management) tools for alerts and incidents.
Perform risk assessments of third-party vendors.
Perform incident response and assist in the remediation process.
Generate security reports for management and compliance purposes.
Support compliance efforts, such as audits and regulatory requirements.
Support cybersecurity awareness program.
Provide level 2 on-call security support.