Information Security Analyst 2, Office of Information Security

Job Overview

Assist in performing procedures and provides technical solutions that serve to provide appropriate access to and protect systems from unauthorized users.

Essential Functions

• Carry out procedures to ensure that all systems, products and services meet organization security standards.
• Research information security trends to understand the latest vulnerabilities and threats.
• Conduct risk and vulnerability assessments of information systems to identity vulnerabilities, risk, and protection needs.
• Assist with providing artifacts to Governance Risk & Compliance in relation to internal & external audits.
• Work with business units to achieve security objectives and identifies, reports, and resolves security risks and violations.
• Mentor non-security teams regarding risk management, information security controls, incident analysis, incident response, monitoring, and other operational tasks (tools, techniques, procedures) in support of technologies managed by the Office of Information Security (OIS).
• Assist with the formation of information security strategies for the protection of sensitive data.
• Involved in the full security systems life cycle which includes, designing, coding, testing, implementing, maintaining, and supporting software, quality assurance, testing and deployment.
• Develop technical documentation (designs, specifications, processes, workflows) and communications.
• Advocate and provide information security consultation on UC projects initiative within the business and development of systems.
• Assist with and manages cyber investigations through forensic fact gathering with a focus on e-discovery.
• Analyze high volumes of logs, network data, and other attack artifacts in support of incident investigations.
• Develop and present information security training and awareness programs.
• Serve as seasoned and proficient professional.
• Perform related duties based on departmental need. This job description can be changed at any time.

Required Education

• Bachelor's Degree in in Computer Science, Information Technology, Computer Engineering, or related field.
• Four (4) years of relevant work experience and/or other specialized training can be used in lieu of education requirement.

Required Experience

Possess a thorough understanding of all aspects of computer and network security, including such areas as firewall administration, encryption technologies and network protocols and contributes through experience, collaboration and problem resolution.

Additional Qualifications Considered

Knowledge of different Cybersecurity tools including but not limited to EDR, SIEM, Network proxies and firewalls and Security Orchestration Automation and Response (SOAR).

Physical Requirements/Work Environment