What are the responsibilities and job description for the Security Analyst IV - 2032 position at Certec Consulting?
Security Analyst IV
Job ID: CER 2032
Location: Madison, WI, 53703
Schedule: Remote
- Candidate MUST be a WI resident or willing to relocate to WI prior to starting the role at their own expense. 100% remote within the State of Wisconsin.
Terms: 1099 or W2 (No C2C)
Compensation: Hourly Rates listed on SkillsMatrix
Instructions to Apply Online:
- Go to certecinc.com/jobs
- Look for the above Job ID & Click on it to find Job Details
- You will find an URL to SkillsMatrix within the Job Description
- Click on SkillsMatrix URL go to File > Select Download option > Select .doc version, Fill it & Save it
- Now Click on "Apply Now" on the same Job Description page and fill all the required details (Mandatory: Resume, SkillsMatrix, LinkedIn)
Note: Applications via certecinc.com/jobs ONLY will be reviewed
We'll cut off considering resumes on 03/29 at Noon CST.
Our organization is seeking a highly experienced and skilled Security Analyst IV to join our dynamic security team. This senior-level role is critical in protecting our organization's information assets and ensuring a robust security posture. The Security Analyst IV will be responsible for leading and executing complex security assessments, incident response activities, and vulnerability management programs. This individual will serve as a subject matter expert, providing guidance and mentorship to junior analysts, and will play a key role in developing and implementing security policies and procedures.
Responsibilities:
- Lead complex security assessments, including penetration testing, vulnerability scanning, and risk assessments, to identify and mitigate security vulnerabilities.
- Develop and implement incident response plans, and lead incident response activities, including containment, eradication, and recovery.
- Manage and improve vulnerability management programs, ensuring timely identification and remediation of security weaknesses.
- Conduct in-depth security analysis of systems, networks, and applications to identify and address security threats.
- Develop and maintain security policies, procedures, and standards, ensuring compliance with industry regulations and best practices.
- Provide expert-level security guidance and mentorship to junior security analysts.
- Research and evaluate emerging security technologies and threats and recommend appropriate security solutions.
- Collaborate with IT and other departments to ensure security considerations are integrated into all aspects of the organization's operations.
- Perform forensic analysis and investigations of security incidents.
- Develop and deliver security awareness training to employees.
- Generate detailed reports and presentations on security findings and recommendations.
Qualifications:
- Bachelor's degree in computer science, Information Security, or a related field; Master's degree preferred.
- Minimum of 8-10 years of experience in information security, with a proven track record of success in security analysis and incident response.
- Extensive knowledge of security frameworks, standards, and best practices (e.g., NIST, ISO 27001, CIS).
- Strong understanding of network protocols, operating systems, and security technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
- Proficiency in security assessment tools and techniques, including penetration testing and vulnerability scanning.
- Experience with incident response and forensic analysis.
- Excellent analytical, problem-solving, and communication skills.
- Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP) are highly desirable.
- Experience with cloud security (AWS, Azure, GCP) is highly desired.
- Experience with scripting languages (Python, PowerShell, etc.) is highly desired.
- Experience with threat intelligence platforms is highly desired.
Top Skills & Years of Experience:
- Lead complex security assessments, including penetration testing, vulnerability scanning, and risk assessments, to identify and mitigate security vulnerabilities. (8 years)
- Develop and implement incident response plans, and lead incident response activities, including containment, eradication, and recovery. (8 years)
- Manage and improve vulnerability management programs, ensuring timely identification and remediation of security weaknesses. (8 years)
Nice to have skills:
- Strong understanding of network protocols, operating systems, and security technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
- Proficiency in security assessment tools and techniques, including penetration testing and vulnerability scanning.
- Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP) are highly desirable.
