What are the responsibilities and job description for the Cyber Security Analyst position at Heritage MGA LLC?
ESSENTIAL DUTIES AND RESPONSIBILITIES
- Daily monitoring of existing security tools such as those listed below under security tools
- Review and follow-up of alerts and escalation of more complex alerts
- Identification of gaps that are causing reoccurring issues and advise on procedures or tools to solve them
- Participate in incident response by providing requested data and investigating additional leads
- Maintaining solid knowledge of cybersecurity issues via RSS feeds, security blogs, and podcasts.
- Increasing / Maintaining knowledge of security disciplines through on-the-job and training and online security courses with the preference of obtaining certificates.
- Determine the impact of current threats to our security posture
- Maintain operational configurations of all in-place security solutions as per the established baselines.
- Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
- Monitor all in-place security solutions for efficient and appropriate operations.
- Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
- Participate in investigations into problematic activity.
- Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
- Provide support for end users for all in-place security solutions.
- Ability to review and update security related policies and procedures.
- May perform other duties and responsibilities as assigned.
REQUIREMENTS
Security Tools
At least three years of experience managing / using tools in at least 5 of the following areas and knowledge of the basic principles of the other areas (sample vendors are in parenthesis, but these vendors are not required)
Be able to discuss how you deployed them, used them and how they fit into the holistic security picture.
Education
College or university degree in the field of computer science or similar and 3 years experience in InfoSec or Information technology OR
CompTIA Certificates (Network , Security , CSA , CASP)
NIST 800-53 / CSF
Pre-Employment Requirements :
Must pass pre-employment background check. Other checks may be needed based on position : driving history, credit report, etc. The preceding job description has been designed to indicate the general nature of work performed; the level of knowledge and skills typically required; and usual working conditions of this position. It is not designed to contain, or be interpreted as, a comprehensive listing of all requirements or responsibilities that may be required by employees in this job. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
Equal Opportunity Employer
Heritage Insurance Holdings, Inc. is an Equal Opportunity. We will not discriminate unlawfully against qualified applicants or employees with respect to any term or condition of employment based on race, color, national origin, ancestry, sex, sexual orientation, age, religion, physical or mental disability, marital status, place of birth, military service status, or other basis protected by law.
