Information Security Vulnerability Analyst

System One
Graymoor-Devondale, KY, United States
about 1 month ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Cyber Security Intrusion Detection Systems Linux Servers Network Administration Network Protocols Security Information and Event Management Transmission Control Protocol (TCP) Software Vulnerability Management Firewalls (Computer Science) Cybercrime Vulnerability Analysis

Job description

  • Monitor enterprise security tools and investigate security alerts and suspicious activity.
  • Administer and enhance security technologies including Rapid7, SIEM, endpoint protection, IDS/IPS, and firewall platforms.
  • Perform vulnerability scanning, prioritize remediation efforts, and partner with infrastructure teams to reduce organizational risk.
  • Lead or participate in security incident response activities, investigations, and post-incident reviews.
  • Support security for infrastructure and application projects by providing architecture and risk guidance.
  • Develop and maintain security policies, standards, procedures, SOPs, and technical documentation.
  • Support internal and external audits by providing security evidence and compliance documentation.
  • Research emerging threats and recommend improvements to the organization’s security posture.
  • Collaborate with SOC, NOC, Infrastructure, Networking, and Application teams to resolve security issues and strengthen defenses.

Requirements

  • 2-4+ years of experience in Information Security, Cybersecurity, Network Administration, or Systems Administration.
  • Experience with enterprise security technologies including Rapid7, SIEM, IDS/IPS, firewalls, endpoint protection, and vulnerability management. Must have Rapid 7 experience.
  • Strong understanding of TCP/IP networking, network protocols, and security architecture.
  • Experience monitoring, administering, and maintaining enterprise security tools.
  • Knowledge of cyber threats, attack techniques, vulnerabilities, and mitigation strategies.
  • Experience conducting vulnerability assessments, risk analysis, and remediation planning.
  • Familiarity with security frameworks such as NIST, ISO 27001, and HITRUST.
  • Ability to troubleshoot Windows/Linux servers, networking, and security-related issues.
  • Strong written and verbal communication skills with the ability to work across Infrastructure, Networking, SOC, and application teams.
  • Experience supporting security audits and regulatory compliance initiatives.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

Benefits & conditions

Pulled from the full job description

  • 401(k)
  • Health insurance
  • Vision insurance
  • Dental insurance
  • Life insurance

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

1:43 min

The physical pain of early web app deployment

4:34 min

Motivational categories behind modern cybercriminal activities

Mauro Verderosa · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

3:50 min

Understanding Docker container architecture and virtual machine differences

Francesco Ciulla Francesco Ciulla · World Congress 2024

Videos

See all

Related articles

See all