Overview
Join the best in the industry at Nextech and embark on a rewarding career journey! For over 30 years, we've built our success on a foundation of Quality, Value, and Integrity, fostering enduring partnerships with thousands of satisfied customers. With over 2,000 team members nationwide, Nextech sets itself apart from other companies by being America's largest HVAC / R service provider.
As we continue to grow, we're committed to offering an exceptional work experience for our employees with numerous opportunities for development and advancement. If you pride yourself on quality work, integrity, and dedication, we want you on our team. Nextech boasts outstanding review ratings on Indeed and Glassdoor, making it the premier destination for HVAC professionals. Elevate your career by joining Nextech today!
Role :
The Senior Cybersecurity Analyst will participate strategically and tactically in the overall planning, organizing, and execution of all Information Technology Security functions for Nextech . This hands-on position requires a flexible, well-rounded individual, who is comfortable operating within an IT Cybersecurity team as they build and implement Nextech's Cybersecurity strategy.
Nextech is seeking a strong technical Analyst with the ability to execute as well as grow and advance our Cybersecurity program. This is a unique opportunity to continue to build on a solid foundation, shape your future, and help build a high performing Security Program with the opportunity to grow your career.
Benefits :
- Paid Training & Ongoing Development - Invest in your career with fully paid initial and continuous training.
- Top-Tier Health Insurance - Choose from excellent options, including a FREE employee-only plan.
- Dental & Vision Coverage - Prioritize your overall health with added benefits.
- Supplemental Insurance Options - Access Accident, Critical Illness, Disability, and Supplemental Life coverage.
- FREE Life Insurance - Coverage equal to your annualized pay at no cost to you.
- 401(k) Retirement Plan - Secure your future with a 50% match on the first 6% of your contributions.
- Generous Time Off - Recharge with 7 paid holidays, and Paid Time Off (PTO).
Role
The Senior Cybersecurity Analyst will participate strategically and tactically in the overall planning, organizing, and execution of all Information Technology Security functions for Nextech. This hands-on position requires a flexible, well-rounded individual, who is comfortable operating within an IT Cybersecurity team as they build and implement Nextech's Cybersecurity strategy.
Nextech is seeking a strong technical Analyst with the ability to execute as well as grow and advance our Cybersecurity program. This is a unique opportunity to continue to build on a solid foundation, shape your future, and help build a high performing Security Program with the opportunity to grow your career.
Company Benefits
Paid Training & Ongoing Development - Invest in your career with fully paid initial and continuous training.Top-Tier Health Insurance - Choose from excellent options, including a FREE employee-only plan.Dental & Vision Coverage - Prioritize your overall health with added benefits.Supplemental Insurance Options - Access Accident, Critical Illness, Disability, and Supplemental Life coverage.FREE Life Insurance - Coverage equal to your annualized pay at no cost to you.401(k) Retirement Plan - Secure your future with a 50% match on the first 6% of your contributions.Generous Time Off - Recharge with 7 paid holidays, and Paid Time Off (PTO).Min Compensation
USD $82,000.00 / Yr.
Max Compensation
USD $112,000.00 / Yr.
Responsibilities
Participates in the continued development of Nextech's security program, strategies, roadmaps and standardization following industry best practicesProvides system security subject matter expertise input and recommendations to IT & Development teamsSecurity compliance & vulnerability scanning / remediation across multiple platforms and networksManages security efforts, including but not limited to access control, monitoring configuration, security patch testing, configuration management and incident responseTranslates cyber-threat intelligence into actionable mitigation plansPartners with IT support groups & DevOps Teams to remediate security vulnerabilities, establish best practices, and build sustainable Cybersecurity programsConducts research and makes recommendations on products, services, and standards in support of all global infrastructure security effortsDevelops and maintains appropriate response playbooks, facilitates routine exercises, and ensures a sound communication process for all cyber eventsWorks directly with Managed Detect and Response (MDR) vendor to ensure timely alerting, remediation / incident response, and Root Cause | Corrective ActionsCompletes assigned tasks in a safe, accurate, thorough, and alert mannerUpholds Company policies and proceduresWorks in a professional manner with managers, supervisors, coworkers, customers, and the publicOther related job duties as assignedQualifications
Participates in the continued development of Nextech's security program, strategies, roadmaps and standardization following industry best practicesProvides system security subject matter expertise input and recommendations to IT & Development teamsSecurity compliance & vulnerability scanning / remediation across multiple platforms and networksManages security efforts, including but not limited to access control, monitoring configuration, security patch testing, configuration management and incident responseTranslates cyber-threat intelligence into actionable mitigation plansPartners with IT support groups & DevOps Teams to remediate security vulnerabilities, establish best practices, and build sustainable Cybersecurity programsConducts research and makes recommendations on products, services, and standards in support of all global infrastructure security effortsDevelops and maintains appropriate response playbooks, facilitates routine exercises, and ensures a sound communication process for all cyber eventsWorks directly with Managed Detect and Response (MDR) vendor to ensure timely alerting, remediation / incident response, and Root Cause | Corrective ActionsCompletes assigned tasks in a safe, accurate, thorough, and alert mannerUpholds Company policies and proceduresWorks in a professional manner with managers, supervisors, coworkers, customers, and the publicOther related job duties as assignedRequired Knowledge, Skills, and Abilities :
Advanced knowledge of internetworking and Windows client / server security concepts, best practices, and proceduresBroad understanding of all aspects of IT and enterprise systems interoperabilityAbility to communicate technical topics (verbal and written) to multiple organizational levelsAbility to perform Pre-Audit cybersecurity tasksDemonstrated personnel / project management skillsAble to conduct research into issues and products as requiredAbility to prioritize and execute tasks in a fast-paced environment and make sound decisions in emergency situationsHighly self-motivated and directedProven analytical and problem-solving abilitiesStrong customer service orientationAbility to work globally in a team-oriented environmentExcellent interpersonal written and oral communication skillsProficient in Microsoft Office including advanced skills in Excel (Pivot tables, Vlookup, Macros, If Statements, Formulas)Ability to coordinate, contribute to and work within a cross-functional teamAbility to thrive in a dynamic and fast-paced environmentAble to prioritize duties and manage multiple projects from start to finish with minimal supervisionMust possess the ability to take initiative to complete assignments and job responsibilities with minimal supervisionExceptional attention to detail and excellent organizational skillsEducation and Experience :
BS / BA degree from a four-year accredited university or college in Information Security, IT Engineering, or Computer Science and / or Eight (8) years relevant work experienceCISSP, SANS, GIAC, CISM, CISA are preferredExperience with IPS / IDS, IaaS / SaaS environments5 cumulative years' experience in the following :Security Risk Analysis / Threat and Risk Analysis
Security Information Event Management SystemsSecurity Incident ResponseProject ManagementVulnerability ManagementSystems / Requirements EngineeringSecurity ConceptsPrevious experience in HVAC Industry or other service business preferredSolid "hands on" technical experience is essentialPhysical requirements :
Continuously able to work in office environmentContinuously able to operate a computer and other office productivity machinery, such as a copy machine, telephone, and computer printerContinuously able to sit at a computer for up to 8 hoursAble to alternate between sitting and standing, as needed throughout the dayOccasionally able to lift up to 15Continuously requires vision, hearing, twisting, and talkingOccasionally requires walking, lifting, carrying, reaching, kneeling, pushing / pulling, bending, and crouchingRarely requires climbingOther requirements :
May be required to use personal smartphone with a camera capable of reading a QR code for 2 factor authenticationEducation and Experience
BS / BA degree from a four-year accredited university or college in Information Security, IT Engineering, or Computer Science and / or Eight (8) years relevant work experienceCISSP, SANS, GIAC, CISM, CISA are preferredExperience with IPS / IDS, IaaS / SaaS environments5 cumulative years' experience in the following :Security Risk Analysis / Threat and Risk Analysis
Security Information Event Management SystemsSecurity Incident ResponseProject ManagementVulnerability ManagementSystems / Requirements EngineeringSecurity ConceptsPrevious experience in HVAC Industry or other service business preferredSolid "hands on" technical experience is essentialPhysical Requirements
Continuously able to work in office environmentContinuously able to operate a computer and other office productivity machinery, such as a copy machine, telephone, and computer printerContinuously able to sit at a computer for up to 8 hoursAble to alternate between sitting and standing, as needed throughout the dayOccasionally able to lift up to 15Continuously requires vision, hearing, twisting, and talkingOccasionally requires walking, lifting, carrying, reaching, kneeling, pushing / pulling, bending, and crouchingRarely requires climbing
Salary : $82,000 - $112,000
