Junior Security Analyst

Description

Position Summary: In this role, you will be a member of the information security team for GNY - which is a subset of the IT Operations team. You will work closely with GNY’s IT Security Analyst and IT Operations team to actively prioritize day to day operational activities, identify and respond to security risks and incidents, recommend and implement solutions, work with affected parties and systems to address the risk, and ensure that the remediation remains in effect. You must combine hands-on experience with an understanding of theory and practice. Responsibilities include monitoring and remediating security events which includes working with cybersecurity partners and the IT Operations department to address the event and escalate to senior members as necessary. This role will also be required to provide basic IT support when needed.

Essential Duties and Responsibilities:

• Work closely with GNY’s IT Security Analyst and IT Operations team to actively prioritize day to day operational activities, identify and respond to security risks and incidents, recommend and implement solutions, work with affected departments to address the risk, and ensure that the remedy remains in effect.
• Perform day to day level-1 administration and support of security infrastructure tools and systems, including but not limited to SIEM, IDS/IPS, EDR, Anti-Virus/Malware, DLP, and other Network or System Monitoring tools.
• Collaborate with MDR/SOC and other security partners.
• Review security logs of critical systems to identify risks, security threats, or configuration errors.
• Review daily, weekly, and monthly security reports for any anomalies or issues.
• Provide first level support on security issues and alerts.
• Maintain documentation on security architecture, procedures, configurations.
• Assist IT Security Analyst to prepare Incident Response documentation, IR Playbooks, policies, and other related items for Senior Management.
• Collaborate with IT Security Analyst and IT Operations team to evaluate and implement solutions to improve security posture.
• Provide technical support to design, develop and implement security requirements for new and existing hardware, networks, and applications.
• Assist IT Security Analyst to develop action plan for remediation of security incidents and system vulnerabilities.
• Participate in PEN testing and risk assessments.
• Coordinate security awareness training for user community.
• Offer additional IT operations support as required.
• Participates in projects and performs additional duties as required.

Qualifications

Education and Experience:

• Bachelor's degree in Computer Science or a related technical field; or equivalent training and/or experience.
• Either 1-2 years of experience within cyber security.
• Previous helpdesk, networking or systems administration experience with some exposure to cyber security.

Skills:

• Understanding of security logging, audit logging, and event logging
• Good analytical and problem solving skills to troubleshoot and resolve security issues
• Ability to be organized and very detailed oriented
• Ability to perform and interpret vulnerability assessments
• Ability to administer the operations of a security infrastructure
• Ability to balance and prioritize work
• Knowledge of internet, web, application, and network security techniques
• Knowledge of industry security frameworks and standards (such as NIST, ISO, SOC, etc) as well as data privacy regulations and compliance requirements for NYDFS and other compliance regulations (SOX, GDPR, PCI DSS, etc)
• Basic understanding of TCP/IP, Routing, Switching, Firewalls, and other Network functionality
• Basic knowledge of Linux, Windows, and Virtualization security
• Self-driven to learn and develop skills
• Proficient in Microsoft Office Suites