Job Details

Email to Friend Save Back

Senior Security Analyst

CHICAGO-60602, IL, US
12/15/2016

-

Required Skills

written communication skills

Company

Infinity Consulting Solutions, Inc

Experience

5 to 7 Year(s)

Job Description

Job Description

General Summary of Position Responsibility:

The IT Security Analyst is primarily responsible for the implementation and support of enterprise security for both the server, network and data technical infrastructure there by ensuring that the company maintains a protected Information Technology (IT) infrastructure.

Therefore this individual must be literate in current security practices, threat awareness, and other applications of the security process to the organization's needs.

This individual must be able to execute security policies with demdata-blockedevented field experience capabilities.

The IT Security Analyst is expected to be self-directed and perform responsibilities with minimal supervision.

As this position holds a senior role on the IT team, this individual is required to have a master level understanding of all assigned security infrastructure related to server, network, and application technologies.

This position is also required to assume responsibility for the successful management and completion of complex project and/or tasks. Finally this position is also expected to mentor more junior staff, i.e. other Server, Network and/or Security Engineer(s).

Finally it should be noted that this role will be focused on one or more of the defined IT Security domains listed in the Essential Job Functions and that relevant job skills will be evaluated with regards to the applicable domains.

Essential Job Functions:

Area Specific Job Accountabilities:

• 5 years of hands on Information Security experience preferably within the healthcare industry.

• Ability to quickly analyze data sets and identify patterns to uncover risky attributes and trends

• Ability to proactively tune systems to reduce false positives based on internal & external threat intelligence

• Ability to proactively mine event systems to identify emerging threats

• Ability to lead the firm's next generation cyber security incident response program detailing procedures for detection, response, mitigation, and reporting of cyber security incidents

• Ability to document and implement the rotation schedule and assignments for handling escalated incidents

• Ability to develop new processes and procedures for gathering, handling, searching, and retrieving, digital and/or physical evidence concerning incidents. Ensure forensically sound procedures are documented and followed

• Ability to develop standard processes for closing security alerts based on the type of alert.

• Ability to initiate and execute the cyber security incident response process, including prioritization and ranking of escalated incidents

• Working knowledge of the cyber security incident response technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, host based forensics and case management system

• Act as subject matter expert for vulnerability management and threat intelligence

• Ability to develop security baseline configurations for server and network infrastructure including scans for compliance

Skills & Experience Required

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred. Industry certifications such as CISSP or GCIH a plus.

• 5 years of experience in information security or related technology experience required, experience in the securities or financial services industry is preferred.

• 5 years of cyber security and incident response.

• Strong knowledge of technology and security controls related to the detection, analysis, containment, eradication and recovery from cyber security incidents.

• Familiarity with Windows operating system and associated vulnerabilities

• Strong verbal and written communication skills

• Server and database security hardening

• Certified Ethical Hacker (CEH) certification a plus.

• Technical writing experience

o Management level reports

o Standard operating procedures documents

o Formal processes and procedures documents