Senior Information Security Analyst

Summary :

The Senior Information Security Analyst will be responsible for monitoring the Firm security systems and performing penetration tests of the infrastructure. Key responsibilities entail daily monitoring activities, including SIEM and other security tools and identification and mitigation of suspicious events, conducting controlled penetration tests, identifying vulnerabilities, and delivering reports with recommendations for mitigation. The successful candidate will also support all other Security Operations activities and assist in the deployment and operation of information security systems, as well as work on a diverse set of security related projects and responsibilities.

Essential Duties and Responsibilities :

• Perform real-time security log and event analysis and take action to contain and mitigate information security threats. The events will originate from SIEM, DLP, IDS, IPS, antivirus, firewalls, system security logs and user reports.
• Conduct manual and automated penetration testing of web applications, APIs, networks, cloud environments, and mobile apps.
• Simulate real-world cyber-intrusion techniques to identify security vulnerabilities and validate practical exposures / risks.
• Develop automation workflows, routines and scripts to support advanced testing efforts and remediation validation
• Contribute to red team engagements, threat modeling, and purple team exercises.
• Assist in maintaining existing security systems, such as IPS / IDS, Anti-Virus, EPO, SIEM, NAC and other cyberattack detection and analytics tools; assist with security technologies deployment, configuration, troubleshooting, maintenance, patching / upgrading and decommission.
• Make enhancements to existing monitoring and security operations and contribute to a Continuous Monitoring program framework.
• Work across teams to accomplish security program goals.

Knowledge, Skills, and Abilities Required :

Education and Experience :

Working Conditions :