IT Security Analyst

Description

• Hands on management of improvement programs, re-configurations, and effectiveness of our evolving tools, including issue tracking, user support and vendor relations.
• “design/engineering” systems that allow us to conduct our technical work of designing, evaluating, and improving buildings and other structures more efficiently around the world. This includes, for example, harvesting data from Autodesk design modeling tools to use in other analytical tools.
• Monitor changes in external requirements including security certification programs, regulation, and industry best practices.
• Create and maintain review checklists.
• Assist teams in implementing security best practices.
• Develop plans for changes, upgrades, maintenance, training, and communication.
• Participate in proactive problem avoidance as well as incident investigation/lessons learned activities.
• Develop training materials and other ways to evangelize good cyber security practices in the company.
• Hands on participation in incident response and remediation efforts.
• Understand the available commercial software/service options and configuration possibilities and identify opportunities that will benefit the firm.
• “business” systems that help the company communicate, manage its operations, and measure performance. An example of this is a master database of our projects, current and historical, that allows staff to find relevant work that might help them and allows management to analyze trends and better sell the next generation of work.
• Coordinate vulnerability testing.
• Help during planning and execution phases.
• Evaluate the “current state” to identify strengths, weaknesses and opportunities associated with our systems and fit with our culture and business needs.
• Develop and maintain best practices.

Requirements

• Strong knowledge of full stack javascript development and cloud services architecture (AWS and Azure services) is essential.
• Familiarity with Web & Desktop Application Development, Cloud services, Linux & Windows System administration.
• Awareness of evolving US Government cybersecurity requirements and international standards in major markets where TT operates (especially North America, UK, India).
• AWS & Microsoft Azure cloud platforms
• Node.js (most important)
• React, Vue, Angular front-end frameworks
• Deep awareness of cyber issues and options for software development, with a CISSP or another credential preferred.
• Standardization around authentication mechanisms.
• Privacy awareness (e.g., PII/GDPR/CCPA).
• 5+ years in software development with significant experience in planning and design for custom software development.
• Broad understanding of big picture, software architecture, networking.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance