Principal Information Security Analyst

Role overview

Responsibilities

• Develop and execute controls and defenses to prevent attacks on email, data, e-commerce, and web-based systems.
• Maintain firewalls and encryption protocols and administer physical and virtual access policies.
• Conduct network security audits and testing and evaluate configurations for effectiveness and compliance.
• Perform penetration testing and vulnerability assessments of applications, operating systems, and networks.
• Respond to breaches, identify intrusions, and isolate, block, and remove unauthorized access.
• Research threats, conduct root-cause analysis, and assist with security solutions.
• Communicate business impacts of theft, destruction, alteration, or denial of access to information and systems.

Required experience and skills

• Configure, maintain, and optimize endpoint and perimeter security solutions such as DLP, EDR, email gateways, SIEM, web filters, and SASE.
• Analyze security logs, alerts, and telemetry to detect anomalies and threats.
• Support cloud and network security initiatives, including CSPM and CASB technologies.
• Assess risks and vulnerabilities and recommend security improvements.
• Define and enforce access and conditional access policies following least-privilege principles.
• Investigate incidents, conduct root-cause analysis, and develop response and mitigation procedures.
• Use ITSM tools such as ServiceNow or Jira.
• Example tools include Forcepoint, Palo Alto Prisma, Digital Guardian, ZScaler, Cyberhaven, SentinelOne, CrowdStrike, Mimecast, Proofpoint, Abnormal, and Splunk.

Desired experience and skills

• A bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field is desired.
• A minimum of 3 years of IT, cybersecurity, or related technical experience is desired.
• Experience with access provisioning, termination processes, identity governance, security risk management, and frameworks such as NIST, ISO 27001, or CIS is desired.
• GRC tools and certifications including CISSP, CISM, CEH, GIAC, or Security+ are listed as a plus.
• Cloud security, zero trust architecture, security automation, Python or PowerShell scripting, and API integrations are listed.