Associate Information Security Analyst - Columbia SC

Description

• Creatively developing approaches to problems and recommending actions to management.
• Research, analysis, and troubleshoots information system compliance and security issues.
• Reports control failures and gaps to stakeholders. Provides remediation guidence and prepares management reports to track remediation activities.
• Help develop security metrics dashboard and maintain.
• Stay up to date with the latest vulnerabilities, exploits, security trends and general changes in technology to provide guidance on how these affect the security of our business.
• Conduct regular vulnerability assessments using automated scanning tools to identify security weaknesses, out-of-date version, and vulnerable system across our IT infrastructure operations.
• Generate accurate and concise vulnerability assessment reports including vulnerability exposure, risk, and remediation progress.
• Apply a risk-based approach in identifying, executing, and reporting to stakeholders for mitigation.
• Assist in developing and updating vulnerability management procedures and processes and enforcing those procedures and processes.
• Analyze scan results and assess vulnerabilities regarding severity, impact, and potential risk to the IT infrastructure operations and collaborate with IT teams and applications owners to prioritize and coordinate remediation via patching and/or mitigation controls.
• Review patch management data and report gaps to responsible groups to conduct risk mitigations.
• Analyze and monitor technical controls to ensure that specific security controls are managed and maintained.

Requirements

• Experience with Microsoft power Tools.
• Proficiency with vulnerability scanning tools such as knowledge of Tenable Security Center.
• Experience with Microsoft SQL and Oracle database
• Basic experience in Information Technology and business analysis.
• Basic understanding of risk assessment methodologies and ability to evaluate vulnerabilities’ potential impact to the IT infrastructure operations.
• Excellent organizational skills with strict attention to detail.
• Experience with Regex and Microsoft PowerShell.
• Experience with NIST Common Vulnerability Scoring System (CVSS)
• Knowledge of cyber security principles and solutions.
• Detail-oriented approach to analyzing scan results and identifying false positives.
• Ability to work independently and collaboratively across teams.
• Experience with Microsoft Endpoint Configuration Manager (SCCM) and Group Policies (GPO)
• Diverse knowledge of information security as well as ability to clearly present and communicate on technical subjects to various audiences.
• Must have strong analytical and critical-thinking skills.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance