Principal Information Security Analyst

Division: Information Technology
Employment Status: Exempt
Salary Grade:108
Shift:
Requisition ID:76497
Please be aware that if you are selected to formally interview for an internal position you will be required to notify your current manager. Please refer to the Employee Transfers Guidelinesposted on Skylink.
Description
We are seeking a seasoned Cybersecurity Engineer/Analyst to help strengthen and mature our organization 's security posture. This role will be responsible for implementing, managing, and optimizing a wide range of endpoint, perimeter, and cloud security technologies, as well as performing hands:on analysis of alerts, incidents, and vulnerabilities.
The ideal candidate is proactive, detail:oriented, and skilled at both the technical and strategic aspects of cybersecurity. You 'll work cross:functionally with IT, Infrastructure, and GRC teams to identify risks, design mitigations, and ensure alignment with security best practices and compliance standards.
Responsibilities
PRIMARY RESPONSIBILITY: Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e:commerce and web:based systems. Maintains hardware, software and network firewalls and encryption protocols. Administers cybersecurity policies to control physical and virtual access to systems. Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures. Conducts penetration testing and vulnerability assessments of applications, operating systems and/or networks. Responds to cybersecurity breaches, identifies intrusions and isolates, blocks and removes unauthorized access. Researches and evaluates cybersecurity threats and performs root cause analysis. Assists in the creation and implementation of security solutions. Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
Required Experience and Skills
stylemargin:top:0.0in;margin:bottom:0.0in typedisc:
:
Configure, maintain, and optimize endpoint and perimeter security solutions such as DLP, EDR, email gateways, SIEM, web filters, and SASE technologies.
:
Example tools: Forcepoint, Palo Alto Prisma, Digital Guardian, ZScaler, Cyberhaven, SentinelOne, CrowdStrike, Mimecast, Proofpoint, Abnormal, and Splunk.
:
Analyze security logs, alerts, and telemetry from SIEM and other security systems to detect anomalies and potential threats.
:
Support cloud and network security initiatives, including configuration and management of CSPM and CASB technologies across platforms such as Zscaler, CrowdStrike, SentinelOne, and Proofpoint.
:
Identify and assess risks and vulnerabilities and recommend actionable steps to improve the organization 's overall security posture.
:
Define, implement, and enforce access control and conditional access policies following security best practices and least privilege principles.
:
Collaborate with IT, security, and business units to develop and implement security strategies aligned with industry frameworks and organizational goals.
:
Investigate and respond to security incidents, performing root cause analysis and developing response and mitigation procedures.
:
Complete work in ITSM tools such as ServiceNow or Jira.
:
Partner with Governance, Risk, and Compliance (GRC) team members to enhance and maintain risk management, compliance, and governance processes.
Desired Experience and Skills
stylemargin:top:0.0in;margin:bottom:0.0in typedisc:
:
Bachelor 's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
:
Minimum 3 years of experience in IT, cybersecurity, or a related technical field.
:
Proven experience with security configuration, monitoring, and management across
Job Type: Permanent