Description:
The Cybersecurity Analyst is responsible for monitoring, analyzing and reporting on cybersecurity activities and trends in information technology systems, information security systems, and Ensemble’s IT infrastructure. Provide trending insights needed to enhance security controls. Conduct vulnerability assessment of information systems and provide recommendations for risk prioritization. Work with the Security Operations Center to resolve alert and escalate as needed.
Job Competencies
- Valuing Differences - Works effectively with individuals of diverse cultures, interpersonal styles, abilities, motivations, or backgrounds; seeks out and uses unique abilities, insights, and ideas. Considers the collective.
- Collaboration - Works cooperatively within teams and partners with others, both internally and externally as needed, to achieve success; focuses on the results of the team, not the achievements of one person. It’s “All for One and One for All”
- Accountability - Accepts personal responsibility and/or consequences of failure and successes, delivering on commitments and refocusing effort when needed. Someone who is willing to step up and own it.
- Time Management - Effectively manages personal time and resources to ensure that work is completed efficiently.
- Developing Trust - Gains others’ confidence by acting with integrity and following through on commitments; treats others and their ideas with respect and supports them in the face of challenges.
- Takes Initiative - Takes prompt action to accomplish goals and achieve results beyond what is required; is proactive and pursues relentlessly.
Essential Job Functions
- Coordinate with relevant teams to validate network alerts.
- Analyze network traffic to identify potential threats and report events that occur or might occur within the network to protect information, information systems, and networks from threats.
- Use defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats.
- Use data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within the environment for the purposes of mitigating threats.
- Monitor network activity to pro-actively remediate unauthorized activities.
- Review Security Logs
- Perform cyber defense trend analysis and report findings.
- Scan for vulnerabilities and collaborates with relevant teams to ensure timely remediation.
- Assist in the development and maintenance of security documentation.
- Investigate suspected cases of improper activity, coordinates reporting and recommends corrective steps.
- Respond to security-related incident and service requests within allotted service level agreement time.
- Other Preferred Knowledge, Skills and Abilities
- CompTIA Security+ Experience with cloud infrastructure.
- CYSA+
- Experience with threat intelligence, DLP, insider threats, CASB.
- Experience with endpoint security tools, such as Swimlane SOAR, Zscaler, etc.
- 2 to 5 years of experience
- This position pays between $69,400-$109,305 based on experience
- Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.
- This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.