Security Analyst

TRIUMPH is hiring a Security Analyst to provide technical expertise and support for IT systems and security applications. The role supports company-wide information security controls, including endpoint security remediation, vulnerability assessments, security monitoring, and incident response.

Responsibilities:

• Investigate and respond to possible threats to Information Systems by analyzing results produced by security monitoring and vulnerability assessment tools
• Perform endpoint, application, and server malware remediation tasks including root cause analysis on security incidents
• Support the management of security systems, projects, policies, practices and standards
• Assist with the evaluation of new security related technologies which may be used to replace, enhance or integration with IT systems
• Monitor and perform daily security incident alert remediations
• Maintain professional skills, certifications, and competencies
• Ensure policies and procedures put in place are adhered to and take corrective action where non-conformities are identified
• Assist with endpoint security risk and vulnerability assessments including remediation efforts
• Work within a service desk ticket system to manage day to day activities
• Research new and better ways of mitigating security risks using emerging technologies and solutions
• Work with the IT Management Team to proactively maintain the overall Cybersecurity Program
• Work with IT and business teams for project support activities
• Increase Information Security awareness within the corporation by assisting with training on information security
• Assist with monthly security metric reports
• Communicate timely status updates (both verbal and written) to team members and management
• Performs other security duties as assigned

Requirements:

• Two to four years' experience with companies that have successfully used IT as a business lever in driving optimization and change
• IT Security Certification and/or and prior experience in a global security and compliance team required
• Understands security regulations and has prior work experience in a highly regulated industry
• Bachelor's degree in Math, Computer Science required
• Minimum of 3 years of IT experience required
• Understanding of attack vectors, current threats, and their remediation strategies
• Understanding of control frameworks and reference architectures such as NIST, Cyber Security kill chain
• Understanding of TCP/IP (Transmission Control Protocol/Internet Protocol) networking and the OSI (Open Systems Interconnection) 7-layer model
• Working knowledge of Windows operating systems and products, UNIX, Linux, and Cloud-based systems
• Strong analytical, problem solving, and attention to detail capabilities
• Ability to help others in the organization with IT security knowledge at a level of understanding appropriate to their job function
• Excellent oral/written communications, organizational, teamwork, and interpersonal skills
• Ability to multi-task in a fast-paced environment
• Demonstrated outstanding level of professionalism, including ability to exercise good judgment, discretion, tact, and diplomacy
• Ability to work independently under consultative direction only
• On call rotation required
• Demonstrate the importance of good decision making and strategic discipline through example