This job might no longer be available.

Information Security Analyst

Supports the company-wide information security program that is intended to safeguard customer information and to address applicable Federal and State regulatory requirements, as well as technical and procedural best practices. Assists with proactive security auditing, analysis, and incident response procedures. Develops tools that automate common security processes.

• Maintain Nessus scan configurations, review weekly differential scan reports for abnormal configurations and other risks. Work with IT, Ops and Development to verify fixes
• Work with IT and Ops teams to create and maintain an inventory of all servers, workstations, and cloud services in use, and to ensure that all are subject to appropriate security controls and covered by security scans
• Work with IT and Ops teams to maintain an inventory of all software in use, and to verify that all software has necessary security patches
• Work with Development teams to maintain an inventory of all libraries and middleware, to identify and place appropriate priorities on necessary security patching, and to verify that patches have been deployed
• Work with Development teams to integrate security testing tools such as Ruby Bundle Audit and Py Safety into a CI/CD pipeline
• Work with IT, Ops, and Development to maintain a list of all data that needs to be backed up. Create and maintain tools to automate backup validation for each data type and location.
• Validate configurations of firewalls and Transport Layer Security
• Recommend security enhancements to senior Security and IT staff
• Help developers and end users install or learn about new security products and procedures
• Performs other duties as assigned by supervisor

*Other duties may be assigned

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Deep networking knowledge in office, datacenter, and public contexts
• Ability to identify and document network security issues
• Ability to create Python scripts to automate common tasks
• Excellent written and verbal communication skills
• Ability to multi-task in a fast-paced, changing environment
• Willingness to learn and apply new skills

• Bachelor’s degree or 4 years industry experience
• IT Networking and Security certifications (e.g., Network+, Security+, CySA+, CISSP) are a plus

• Prior experience with a large scale production Linux Environment
• Prior experience in security risk analysis a plus
• Experience with Docker or other containerized server environments a plus
• Experience with Amazon Web Services a plus
  
  

Possibility of infrequent visits to our satellite offices in Seattle, Boston and Virginia.

The physical demands and work environment described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to use the computer and communicate with coworkers in an office environment. The employee frequently is required to stand or sit to complete work and may occasionally lift and/or move up to 10 pounds.

The statements herein are intended to describe the general nature and level of work being performed by employees in this job. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.