Position: Information Security Analyst

Location: Provo, Utah

Company: DHI Computing Services

Summary of Employee Benefits:

Health Insurance

HSA, FSA

401k Plan with contribution match

Profit Sharing

9 paid holidays

20 days pto

sick leave

paid exercise time

on-site massage therapists

Job Description:

As a Security Analyst at DHI Computing Services you will be at the forefront of our security efforts, responsible for conducting comprehensive security testing, managing vulnerabilities, and enhancing our overall security posture. This is primarily an offensive role, but you will also assist with defensive capabilities. This is a mid-senior level role.

Key Responsibilities:

• Conduct application security testing to identify and mitigate vulnerabilities in web applications. Perform API security testing to ensure the integrity and security of our API endpoints. Conduct Active Directory security assessments to identify and address potential weaknesses or misconfigurations. Lead penetration testing efforts to simulate attacks and evaluate the effectiveness of our defenses. Execute network segmentation testing to ensure proper isolation and protection of sensitive data.
• Serve as the primary owner of the vulnerability management program. Identify, assess, and prioritize vulnerabilities in our systems and applications. Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner.
• Ensure compliance with security policies and standards. Communicate security policies, procedures, and best practices to employees at all levels. Stay updated on the latest security trends and threats to proactively address potential risks
• Assist with the management of defensive security tools including but not limited to Microsoft Defender, Azure Security Center, and Office 365 security, SIEM. Monitor security alerts and take appropriate action to mitigate threats when on call.

Qualifications:

• 3 experience as a Security Analyst or similar role.
• In-depth knowledge of security testing methodologies and tools.
• Experience with vulnerability management and remediation processes.
• Strong understanding of network security, Active Directory, and penetration testing techniques.
• Relevant certifications (e.g., OSCP, OSWE, PNPT) are highly desirable.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a team in a fast-paced environment.