What are the responsibilities and job description for the Cyber Security Analyst position at Knightscope, Inc?
Location
· Remote Work-from-Home (in the U.S.) Flexibility Available
Functions
· Responsible for Cyber Security Questionnaires sent from Knightscope potential clients
· Responsible for ensuring our organization adheres to established information security governance, risk management, and compliance framework such as NIST, and FedRAMP
· Create cyber security procedures, policies, and plans to maintain a good security posture
· Conduct risk exposure assessments to identify potential threats and vulnerabilities
· Perform comparative risk assessments to evaluate different solutions and their impact on security
· Prioritize risks based on their potential impact and likelihood, determining security ROI for prioritization considerations
· Develop and implement remediation plans for identified risks
· Evaluate IT infrastructure in terms of risk to the organization and establish controls to mitigate loss
· Determine and recommend improvements in current risk management controls and system changes or upgrades
· Maintain accurate documentation of security incidents, actions taken, and recommendations for future improvements
· Stay informed about industry standards and regulations related to cyber security and ensure compliance within the company
Qualifications
· 5 years of experience in conducting vulnerability assessment, security control assessments and/or security audits
· Understanding of security management tools (e.g., vulnerability scanners, file integrity monitoring, configuration monitoring, etc.) and perimeter technologies (e.g., router, firewalls, web proxies and intrusion prevention, etc.)
· Knowledge of security technologies such as encryption, firewalls, intrusion detection systems, and SIEMs
· Excellent analytical and critical thinking skills
· Bachelor s degree in Computer Science, Information Systems, Business, or a related field, or equivalent relevant experience
· Hands-on experience with security compliance, policies, and procedures governing data/networks/application systems
· Diverse experience configuring and maintaining security systems: IPS/IDS, SIEM, Firewalls, Vulnerability Scanners, SAST / DAST / IAST
· Self-motivated with a desire to learn everything you can
· Ability to clearly communicate complex technical concepts in simple, professional written English
· Ability to work effectively and thrive in a start-up environment
Bonus Points
· Experience in a startup environment
· Experience with security, encryption protocols, vulnerability, and penetration testing
· Experience with FedRamp government’s security certification
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.