Security Analyst

• Conduct security assessments of AI technologies and their applications
• Review and analyze software for potential vulnerabilities and security risks
• Evaluate hardware configurations for security compliance and potential risks
• Assess and review SaaS configurations to ensure they meet security standards
• Identify and prioritize security vulnerabilities across systems and networks
• Communicate with stakeholders to ensure identified vulnerabilities are effectively remediated
• Collaborate with business users to integrate cybersecurity measures into business operations
• Develop and maintain documentation related to security assessments and findings
• Stay up-to-date with the latest security trends, threats, and best practices, particularly in the context of AI technologies

Cybersecurity Analyst I – Artificial Intelligence

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Conduct in-depth analysis of network traffic, security events, and alerts.
• Identify, evaluate, and prioritize cybersecurity threats and vulnerabilities.
• Implement and enforce security measures and policies.
• Lead investigations of security incidents and provide detailed reports.
• Collaborate with IT and business teams to enhance security protocols.
• Conduct regular vulnerability assessments and penetration tests.
• Mentor junior analysts and provide guidance on best practices.
• Participate in and sometimes lead cybersecurity training sessions.

Cybersecurity Analyst

• The delivery, management, maintenance and tuning of information security data protection technologies (with focus on DLP)
• Maintain oversight of information security data protection support functions including policies, operational issues, training, budget and metrics
• Manage relationships with information security data protection partners (internal Aegon, and external vendors) and provide input into tooling strategy/solutions (e.g., DLP technology)
• Define and maintain oversight of the information security components of a global cohesive data protection strategy
• Maintain alignment with other global programs and stakeholders including general data governance and privacy
• Drive information security data protection improvements and work towards consistent globally agreed capabilities
• Complete research, development and implementation of straightforward information security initiatives, including review of policy, program, process, procedural and technology improvements and solutions to ensure they are current and meet business needs.
• Provide input, creates awareness and training materials and leads certain activities, such as hardcopy and online learning content, presentations, pamphlets, electronic communications (e.g., internal blogs).
• Perform certain procedural tasks found within control self-assessments and security exception/waiver processes, such as assessing controls and compliance with standards, assisting in management of exception reviews and recommending action plans.
• Perform certain procedural tasks found within third-party assessments, such as reviewing due-diligence artifacts, supervising tasks, reviewing results and recommending outcomes.
• Perform procedural tasks found within other security processes, such as information management, classification and protection.
• Ability to help employees and contractors understand their role in safeguarding information, technology and services.
• Assist and show where policies, processes and procedures can be found and explain why they should be followed.
• Tracks current and impeding laws, regulations and industry requirements and best practices, such as data protection, data privacy, cyber security and information security.
• Is able to translate requirements into practical solutions.
• Gathers data, analyzes and drafts reports, including department, project, key indicators and dashboards.
• Assists with requirements and improvement plans.
• Ability to quickly develop excellent working relationships with peers and key stakeholders, such as business partners, legal, internal audit, risk, and technology specialists.

Senior Information Systems Security Analyst – Information Security Data Protection

• Lead configuration monitoring and compliance for database technologies (e.g., Oracle, SQL Server, MySQL, Sybase, MongoDB etc).
• Participate and provide input (as needed) to help define, implement, and maintain secure configuration baselines and control requirements.
• Enable and optimize scanning, monitoring, and alerting capabilities for database configurations.
• Analyze scan results, understand misconfigurations, and support remediation efforts.
• Partner with database, infrastructure, and engineering teams to embed security controls into build and operational processes (shift-left mindset).
• Support risk assessments, audits, and regulatory inquiries related to database security posture.

Cyber Security Analyst, Database Configuration Monitoring

• Product Security Analyst responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify lifecycle balanced information system security solutions.
• Implement cybersecurity features on program systems and implement RMF processes for embedded computing systems.
• Evaluates customer/operational needs to define and coordinate system security requirements, integrate technical parameters and assure compatibility of all physical, functional and program interfaces.
• Performs various analyses to optimize total system of systems and/or system architecture.
• Identifies assets and assesses risks, threats, and vulnerabilities of the product assets in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, non-repudiation and contract compliance.
• Evaluates remediation recommendations and develops a cost to mitigate estimate.
• Employs system security processes, methods, and tools and assures their consistent application.
• Resolves cross-functional technical issues.
• Implements appropriate Accreditation and Authorization (A&A) activities per ICD 503 RMF, NISPOM, or DoD Overprint to the NISPOM as required by customers.
• Coordinates with system administrators, network and software engineers, test and validation engineers and program management on security related activities and requirements.
• Travel (25%) will be required for meetings with customers, internal meetings, etc.

Cybersecurity Analyst – Product Security

• Seeking a Cybersecurity Analyst with strong Unix/Linux expertise to support configuration security monitoring across the enterprise environments.
• Implement and maintain configuration monitoring controls for Unix/Linux systems using scanning tools.
• Participate and provide input (as needed) to help define, implement, and maintain secure configuration baselines and control requirements.
• Enable and optimize scanning, monitoring, and alerting capabilities for Unix/Linux configurations.
• Analyze scan results, understand misconfigurations, and support remediation efforts.
• Partner with Unix/Linux infrastructure, and engineering teams to embed security controls into build and operational processes (shift-left mindset).
• Support risk assessments, audits, and regulatory inquiries related to Unix/Linux security posture.
• Ensure assigned support tickets are dispositioned timely and effectively.

Cyber Security Analyst – Unix/Linux Configuration Monitoring

• Monitor day-to-day operations of the sensors (Suricata, Palo Alto, and Splunk) located at supporting customer's locations.
• Perform Enterprise Defense Countermeasure (DC) activities and coordination with other government agencies to record and prepare incident reports and analysis methodology and results.
• Monitor and analyze signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
• Provide technical enforcement of organizational security policies.
• Provide “tune-or-drop” recommendations towards the DC team’s Signature Lifecycle Review procedure.
• Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
• Communicate with customers and teammates clearly and concisely.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required. Position may require evening, weekend or shift-work (depending on operational tempo).

Junior Cyber Security Analyst – TS/SCI with Polygraph

• Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT.
• Bring your cyber expertise and drive for innovation to GDIT.
• The SOC Analyst Principal must have:

See all jobs on JobTailor