Information Security Analyst

Responsibilities:

• Monitor and analyze security events and incidents to identify potential threats or vulnerabilities.
• Conduct regular security assessments and audits to ensure compliance with established security policies and procedures.
• Assist in the implementation and maintenance of security controls, including firewalls, intrusion detection/prevention systems, and antivirus software.
• Collaborate with cross-functional teams to develop and implement security best practices and protocols.
• Investigate security breaches and incidents, and provide timely response and resolution.
• Participate in the development and delivery of security awareness training programs for employees.
• Stay current with industry trends, emerging threats, and new technologies to continuously improve our security posture.
• Assist in the implementation and maintenance of security tools such as a SIEM, vulnerability scanner, CASB, EDR and others.
• Support compliance efforts with relevant regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).
• Generate and maintain documentation related to SOPs, internal procedures and checklists.
• Participate in on-call rotation and scheduled work. 
• Ability to perform other tasks as assigned. 

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 1-2 years of experience in information security or a similar role.
• 1-2 years of experience with AWS and/or other cloud environments.
• Solid understanding of networking concepts, protocols, and technologies.
• Familiarity with security tools such as SIEM, IDS/IPS, DLP, and vulnerability scanners.
• Knowledge of security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks).
• Strong analytical and problem-solving skills, with the ability to prioritize and multitask in a fast-paced environment.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with team members at all levels.
• Relevant certifications (e.g., CompTIA Security+, CISSP, CEH) are a plus.