About the job
Internal Job Title: IT Security Analyst
Job Type: Permanent, Full-Time
Job Location: United States (Preferred candidates from NY, NJ, PA, MD, DE, VA, NC, or WI)
Work Model: Remote (some on-site employer/customer visits required)
Position Summary
Join CBN Secure Technologies Inc. as an IT Security Analyst, where you will be pivotal in safeguarding our enterprise systems through both strategic oversight and hands-on engagement. This role transcends routine monitoring and compliance; you will actively deploy, configure, and secure systems in intricate on-premises environments, emphasizing automation as a core principle of our operations.
Your responsibilities will encompass hardening infrastructure, integrating security measures into deployments, and ensuring the secure configuration of enterprise applications. You will manage Security Information and Event Management (SIEM) operations, incident responses, and vulnerability assessments. Furthermore, you will devise automation pipelines, conduct system audits, and collaborate closely with infrastructure teams to establish security standards from the outset. We value innovative perspectives and encourage you to contribute ideas on enhancing our security framework.
Responsibilities
- Technical Security Operations
- Deploy, configure, and secure Linux systems and applications with a focus on security best practices for on-premises installations.
- Develop, maintain, and secure automation pipelines to optimize configuration management and enforce security standards.
- Work in collaboration with infrastructure and operations teams to embed security into deployments, upgrades, and system migrations.
- Security Incident and Event Management
- Design, implement, and sustain automated processes in the SIEM environment to bolster threat detection, incident response, and log management.
- Partner with cross-functional teams to integrate security controls and improve the overall efficacy of the SIEM solution.
- Create and maintain automated responses for common security incidents.
- Operational Security Prime
- Collaborate with Risk and Compliance teams to collect evidence for compliance requirements (SOC II, ISO 27001, PCI, NIST 800-53, etc.).
- Establish and execute processes for periodic evidence collection, ensuring accuracy and timeliness in audit responses.
- Work with stakeholders to identify compliance gaps and execute corrective actions.
- Technical Security Analysis
- Monitor SIEM alerts and probe security incidents to ascertain root causes and appropriate remediation strategies.
- Design, implement, and maintain...