Information Security Analyst, I

Must be authorized to work in the U.S.

This is a full-time, direct hire position: Friday - Monday, 7:00 AM - 6:00 PM (ET)

Accepting applicants in the following states: CT, FL, GA, MA, NC, NE, NH, OH, RI, SC, TX, UT, VA

Remote/WFH employees must have a reliable internet connection and must work in an environment free of noise and distraction.

The Company

Make an Impact & Unleash Your Potential:

• We empower businesses to thrive in a connected world by providing innovative, secure, and reliable IT solutions and cyber security services. Immerse yourself in cutting-edge technologies, collaborate with highly talented individuals, and elevate your future.
  
  

We Live Up To Our Values

• Take initiative, professional growth is what you make of it.
• Teamwork, collaboration, sharing of knowledge; it's what we do.
• Be heard, be respected, be supported; leadership is in it for you.
• We accomplish extraordinary results through determination and commitment.
• Customer satisfaction is at the center of what we do; we only succeed when our customers succeed.
  
  

Benefits For a Balanced You (US Employees)

• Insurance Coverage You Can Depend On (Health, Dental, Vision, Life/AD&D, Short-Term Disability, Long-Term Disability)
• Generous Time Off
• 401k Retirement Plan with Company Match
• Peer-to-Peer Recognition
• Learning and Development
• Pet Insurance
• Fun On and Off-Site Events
• Referral Bonus Program
• Employee Assistance Program
  
  

The Opportunity

The Information Security Analyst I will support day-to-day security operations, event/incident investigation, security control assessment, data analysis and reporting, and other infosec-related activities. The analyst will work with the Project team as well as Helpdesk Support team to mitigate risks and vulnerabilities and create documentation or reports regarding infosec activity and incidents.

Essential Duties And Responsibilities

• Perform penetration testing; along with internal and external scanning, assess report and escalate to appropriate team and engineers.
• Resolve any computers with missing Hard Drive Encryption
• Resolve and report out any violations of Office365 hardening security procedures; this includes but not limited to bypassing multi-factor authentication, device compliance policy, conditional access.
• Resolve any computers and servers with missing vulnerability patch and Windows and third-party updates.
• Responds to security incidents (Helpdesk Support), conducts forensic investigations and targets reviews of suspect areas as well as develop action plans to address root causes of security-related problems.
• Collaborates on projects to ensure that security issues are addressed throughout the project life cycle.
• Reports to Risk Manager concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Provides responsive support for problems found during normal working hours as well as outside normal working hours as needed.
  
  

Competencies, Skills, And Qualifications

• 1-2 years of security experience working with Endpoint Security, Intrusion Prevention, and Firewall security
• 2 years of experience working for an MSP/MSSP or SOC (Security Operations Center)
• 2 years of Incident Response Experience
• Proven work experience as a system security engineer or information security engineer
• Experience in building and maintaining security systems
• Detailed technical knowledge of database and operating system security
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Thorough understanding of the latest security principles, techniques, and protocols
• Problem solving skills and ability to work under pressure
  
  

Development Expectations

• Ethical Hacker - Preferred / Development Plan
• Associate of (ISC)² - Preferred / Development Plan
• CISSP (Certified Information Systems Security Professional) – Preferred / Development Plan
• CCNP Security – Preferred / Development Plan
  
  

BCS365 is an Equal Opportunity Employer. We consider applicants for all positions without discrimination based on race, color, religion, creed, gender, national origin, sexual orientation, age marital or veteran status, disability, or any other legally protected status.

Please Note: BCS365 participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.