Network Coverage Hiring for Information Security Analyst at Remote Full Time

Information Security Analyst Job Description

Network Coverage is seeking talented and experienced Analysts to join our growing Security Team. Candidates will primarily work from home, however occasional dispatch may be required for client-facing meetings, presentations, and consultations.

2-4 years of experience working in an Information Security capacity is required for this position with demonstrated working knowledge of Information Security standards as applicable to common frameworks, requirements, and best practices. The ability to communicate effectively with clients and team members and work efficiently to resolve time sensitive issues is a must.

An Information Security Analyst must complete projects on time and work within deadlines and have the ability to adjust to ever-changing client needs and scenarios.

Information Security Analyst (Tier 1/2)

Level: Mid-Level

Reports To: Information Security Officer

Basic Scope and Function:

As an Information Security Analyst at Network Coverage, you will be part of the Security Team triaging events and incidents as they are reported. You will be monitoring infiltration attempts, looking for patterns and root cause to ensure infiltration attempts and compromises are identified and remediated in a timely manner. You will identify attack patterns and advise Network Coverage’s team and clients how best to defend themselves against targeted attacks. Your expertise will be an integral part of our all-encompassing Cybersecurity Management deliverable. You be working closely with team members and clients in various locations across the US and overseas and will fulfill the role of subject matter expert, advising upon the on the most effective approach to security, and continuously developing and helping to implement this approach. As an Information Security Analyst, you will be responsible for Security Auditing, Penetration Testing (Internal & External), Compliance auditing and implementation, among other duties, under the guidance of the Information Security Officer.

Due to the nature of the work, you may be required to fulfill on-call, incident response duties at night and on weekends. Additional work hours may also be required during an incident remediation.

Primary/Essential Duties and Key Responsibilities:

• Continuously monitor assets and respond to active threats affecting Network Coverage’s client and internal systems
• Detect, report, assess, and respond to information security incidents.
• Monitor and analyze data flow to identify and block malicious behavior and activities
• Participate in investigations towards identifying root cause for security events, evaluating anomalous activity, and tuning for frequent false positives.
• Participate in the design and execution of vulnerability assessments and security audits.
• Participate in the management of the employee awareness campaigns for both Network Coverage staff and clients, to include phishing simulations and awareness training.
• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Document best practices with the Cybersecurity and Operations staff using available collaboration tools and workspaces.
• Develop and maintain both internal and client-facing documentation and procedures for reviewing and enforcing end-to-end client security and compliance.
• Anticipate new security threats and stay-up to date with evolving infrastructures.
• Provide timely, detailed, and complete reports on security events and incidents to leadership.
• Provide some after-business hours support in response to security alerts and investigations.
• Perform other duties and tasks as assigned.

Knowledge, Skills and Abilities (KSAs) Required:

• Strong problem-solving and analytical skills.
• Excellent customer service skills, including understanding how to de-escalate, how to soothe and how to deliver the most efficient solution.
• Strong communication skills, both verbal and written.
• Strong familiarity with Windows desktop and server operating systems.
• Strong familiarity with Microsoft Office 365 and Azure Active Directory support and implementation.
• Strong understanding of networking concepts, familiarity with routers, firewalls, access points, IDS/IPS and VPN.
• Familiarity with Email threat protection tools and concepts.
• Familiarity with RMM and asset management tools are a big plus.
• Understanding of tools and processes used in security monitoring and incident response
• Experience with Endpoint Detection & Response (EDR) tools
• Ability to understand vulnerabilities at a technical level and capable of recommending and effectively communicating mitigation strategy
• Familiarity with regulatory frameworks such as NIST/CMMC, ISO 27001, HIPAA/Hitech are a big plus.
• Strong organizational, operational, and inter-personal skills
• Ability to communicate and write in English professionally
• Reliable personal transportation for use in traveling to clients’ offices is essential.

Minimum Experience and Education Required:

• 2-4 years of experience working in an Information Security capacity.
• No College Education Required.
• CompTIA Security+ or similar.
• ISC2 SSCP (Substitute for Security+)
• High School Diploma or Accredited GED.

Supervisory/Managerial Experience and Responsibility:

• No supervisory or managerial experience required.
• No supervisory or managerial duties in this role.

Work Environment:

Work is primarily performed in standard office environments and is primarily sedentary, although there may be some carrying of books, printouts, manuals, files, and equipment. Client environments may vary. May be exposed to moderate noise levels from machinery. Work involves operation of personal computer equipment for 8 hours or more daily.

Medium work: Exerting up to 50 pounds of force occasionally, and/or up to 30 pounds of force frequently, and/or up to 10 pounds of force constantly to move objects.

Duties may also involve stooping, kneeling, crawling, reaching and moving of equipment in order to install or check the installations of network devices and cabling. Travel to various worksites may be required.

Physical Requirements:

• Sitting
• Standing
• Moving of self
• Moving of equipment
• Communicating
• Visual acuity for driving and computer work
• Kneeling
• Crawling
• Reaching
• Stooping
• Lifting
• Pulling

Job Type: Full-time

Job Type: Full-time

Pay: $55,000.00 – $80,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Retirement plan

Schedule:

• 8 hour shift
• On call

Education:

• High school or equivalent (Preferred)

Experience:

• Information Security: 1 year (Required)
• CMMC: 1 year (Preferred)
• NIST 800-171: 1 year (Required)

License/Certification:

• CompTIA Security+ (Preferred)

Work Location: Remote