Information Security Analyst

Burr & Forman LLP has an immediate opening for a full-time, experienced Information Security Analyst.  Preference is given to candidates who will be located in our Birmingham, AL office, but other locations in our footprint may be considered.  The Information Security Analyst will be at the forefront of working with the most recent security issues, exploits, attacks, and other nefarious activities.  This role will assist in maintaining audit and compliance activities to ensure that policies, standards, procedures, and audit activities align with business and regulatory requirements.

Burr & Forman enjoys a highly collaborative culture in a familiar environment where individual contributions are recognized and valued. Our clients have local, national, and international interests, and the work we do is interesting and important.  If you’re a service-minded professional with intellectual curiosity and excellent work ethic, please consider joining our team at Burr & Forman. 

KEY CONTRIBUTIONS 

• Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information
• Validate the firm against policies, guidelines, procedures, and regulations to ensure compliance
• Perform threat hunting and investigations into potential threats based on log data and provide results of analysis to management
• Provide analysis and trending of security log data from a wide range of security devices
• Participate in disaster recovery and business continuity activities
• Participate in cyber incident tabletop exercises
• Function as the subject matter expert in the process of responding to, identifying, and mitigating security incidents
• Function as the subject matter expert for the security tools and platforms utilized by the firm (e.g. EDR, NAC, and DLP)
• Manage, perform, and report on security risk assessments and business impact analysis (BIA)
• Configure and troubleshoot security infrastructure devices
• Understand infrastructure, network, cloud, and desktop, as well as security regulations, requirements, and best practices
• Write comprehensive reports including assessment-based findings and outcomes, and propose further system security enhancement
• Perform Vulnerability Assessment and Penetration Testing (VAPT)
• Assist in planning, implementing, and documenting a secure network topology to meet business requirements
• Assist with the design of the security topology to meet Defense in Depth principles
• Assist with completing client security questionnaires and assessments
• Respond to internal and external inquiries to provide technical assistance and support
• Demonstrate a continuous effort to keep abreast of the information security industry by attending seminars, conventions, and demonstrations, and by reading appropriate technical manuals and industry publications

THE ESSENTIALS

• Bachelor's degree, preferably in computer science, cyber security, or a related field, with a minimum of 5-7 years of experience in a combination of information security and IT, including experience in risk identification and management
• Industry information security certifications such as CompTIA, CySA , GSEC, SSCP, CRISC, CISA, and/or CISSP
• In-depth knowledge of information systems privacy frameworks such as NIST, CSF, HIPAA, ISO27001/27002, and SOC 2
• Knowledge of configuring and implementing technical security solutions (NGFW-Firewalls, IPS/IDS, XDR/EDR, Email Security, and DLP)
• Familiarity with Mitre attack frameworks and remediation
• Strong verbal, written, and interpersonal skills
• Strong analytical skills and the ability to understand and document complex business processes and dataflow
• Highly organized, detail-orientated, and proactive, with a desire to take ownership
• Balance competing priorities and work effectively in a fast-paced environment, exercising patience and professionalism during stressful situations.

EOE/M/F/Vet/Disabled

Burr & Forman is an equal opportunity employer and is committed to recruiting, hiring, developing, and promoting lawyers and staff without regard to age, race, color, religion, sex, national origin, military and protected veteran status, sexual orientation, gender identity or expression, transgender status, sex stereotyping, or disability.

Please view Equal Employment Opportunity, E-Verify, and other related posters at www.burr.com/careers/working-at-burr.