Sr Information Security Analyst (Onsite Role)

O'Reilly Auto Parts•Headquarters, KY

3d•Onsite

About The Position

The Sr Information Security Analyst analyzes and monitors the organization’s cybersecurity measures and responds to penetration attempts. This is an onsite role located in Springfield, Missouri; remote work is not an option. The analyst leads security monitoring and tuning, conducts advanced log correlation and forensic analysis, serves as an escalation point for complex security incidents, and oversees incident response from investigation through post-incident review. The role also improves detection and response capabilities through playbooks, exercises, SIEM content improvements, threat intelligence, and threat hunting. The position involves independent data analysis, troubleshooting complex issues, maintaining documentation, supporting security compliance procedures, adhering to organizational policies and regulatory requirements, and evaluating emerging developments for their potential organizational impact.

Requirements

Comprehensive knowledge and skill; ability to act independently and provide guidance and training to others.
Ability to implement transaction security and computer/network virus protection.
Ability to maintain system/service and information security, integrity, compliance, and continuity.
Ability to ensure the confidentiality, integrity, and availability of information.
Ability to determine and analyze trends in collected data to support reports and decision-making.
Ability to create clear, comprehensive, effective, user-friendly guides, manuals, narratives, and reports that communicate complex technical concepts.
Ability to use documentation tools to create structured, visually appealing content suited to its intended purpose.
Ability to acquire, organize, protect, and process data to fulfill business objectives.
Ability to use standard office equipment and software packages to support business processes.
Ability to create reports and review reports prepared by others for various audiences.
Bachelor's degree or equivalent level.
Three to six years of experience as an experienced practitioner able to handle most situations and advise others.
Basic experience coordinating the work of others, stated as four to six months.

Nice To Haves

Ability to control access to servers, systems, and computers.
Proficiency in using and troubleshooting a wide range of IT hardware, software, and network systems.
Ability to understand, evaluate, use, and engage with digital technology and information and create and share digital content, with awareness of safety, privacy, and ethical considerations.
Adaptability in assessing current facts and circumstances and adjusting thinking and work habits to thrive in different scenarios.

Responsibilities

Lead continuous monitoring and tuning of firewalls, IDS/IPS, and SIEM platforms to detect, investigate, and respond to advanced persistent threats and emerging attack vectors.
Perform advanced log correlation and forensic analysis across multiple systems, identify complex threats, and initiate mitigation strategies.
Serve as an escalation point for complex security incidents and oversee end-to-end incident response, including investigation, containment, eradication, and post-incident review.
Develop and maintain incident response playbooks, tabletop exercises, and threat simulations.
Improve security monitoring and detection by identifying SIEM content gaps, recommending new use cases, and integrating threat intelligence feeds.
Participate in threat hunting to proactively detect adversaries and indicators of compromise.
Collate and analyze data using preset tools, methods, and formats, working independently.
Isolate and resolve complex challenges to limit and address issues promptly.
Create and maintain technical and user documentation to a high standard.
Help develop security compliance procedures and monitor their implementation.
Maintain knowledge of organizational policies, procedures, regulatory codes, and codes of conduct; comply with applicable standards and report, resolve, or escalate noncompliance as appropriate.
Develop a detailed understanding of external developments and emerging issues and contribute to evaluating their potential impact or usefulness to the organization.