Lead Security Analyst

This position will monitor the information security systems, address alerts and incidents, assist on projects, drive change, and administer technical systems designed to maintain the confidentiality, integrity, and availability of all organizational systems and assets.

This is a hybrid position in Pittsburgh, PA.

What you will do

• Assist with administering security solutions such as vulnerability management, endpoint security, secure mail gateway, SIEM, employee awareness training, and other security platforms.

• Detect, report, assess, and respond to information security incidents.

• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.

• Develop and maintain both internal and client-facing documentation and procedures for reviewing and enforcing end-to-end client security and compliance.

• Assist with performing vulnerability scanning, tracking, and facilitate the remediation of vulnerability management findings.

• Assist with supporting the development of a cyber-security metrics program.

• Perform daily log and event analysis of cyber events; follow processes for remediation.

• Assist with monitoring and responding to infrastructure availability incidents related to security technologies.

• Provide timely, detailed, and complete reports on security events and incidents to leadership.

• Assist with project initiatives to accomplish our security roadmap and increase security posture.

• Assist in ensuring technical deployments meet security policy, baselines, and standards.

• Assist with providing support and guidance for security initiatives and questions.

• Provide some after-business hours support in response to security alerts and investigations.

• Any other duties as assigned.

What you will bring

• 5 years of experience

• BA / BS in Information Systems, Computer Science, or equivalent experience

• Experience with Endpoint Detection & Response (EDR) tools.

• Understanding of networking concepts, firewall traffic and IDS/IPS.

• Familiarity with Email threat protection tools and concepts.

• Understanding of tools and processes used in security monitoring and incident response.

• Strong organizational skills with the ability to prioritize work effectively.

• Team player with the ability to respectfully interact with colleagues and stakeholders across the company.

• Innovative problem solving, research, and analytical skills.

• Excellent written and verbal communication skills