Position Overview:

The Security Analyst’s role is to assess the secure operation of the in-house computer systems, servers, and network connections. This includes checking server and firewall logs, scrutinizing network traffic, establishing and updating virus scans, and troubleshooting. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required.

What you will do and achieve:

Strategy & Planning

• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Design and implement disaster recovery plan for operating systems, databases, networks, servers, and software applications.
• Assess need for any security reconfigurations (minor or significant) and execute them if required.
• Keep current with emerging security alerts and issues.
• Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.

Acquisition & Deployment

• Interact and negotiate with vendors, outsourcers, and contractors to obtain protection services and products.
• Recommend, schedule, and perform security improvements, upgrades, and/or purchases.

Operational Management

• Deploy, manage, maintain, and monitorall security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software.
• Manage connection security for local area networks, the company web site, the company intranet, and e-mail communications.
• Manage and ensure the security of databases and data transferred both internally and externally.
• Design, perform, and/or oversee penetration testing of all systems to identify system vulnerabilities.
• Design, implement, and report on security system and end user activity audits.
• Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution.
• Recommend, schedule (where appropriate), and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.
• Download and test new security software and/or technologies.
• Perform system backups.
• Provide on-call security support to end-users.
• Manage and/or provide guidance to junior members of the team.

Who you are:

Education

• University degree in Computer Science, Engineering, or related field. 

Experience

• CISSP, CISA, CISM, or other relevant security related designation(s) appreciated, but not required.  
• 5+ years experience identifying and addressing security gaps in existing Network, Server, Desktop, Database, and Cloud architectures.
• 4+ years experience in designing security processes to mitigate threats. 

Key Knowledge & Skills

• Broad hands-on knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices.
• In-depth technical knowledge of network, PC, and platform operating systems.
• Working technical knowledge of current systems software, protocols, and standards, including […].
• Strong knowledge of TCP/IP and network administration/protocols.
• Hands-on experience with devices such as hubs, switches, and routers.
• Knowledge of applicable practices and laws relating to data privacy and protection.

This job description is a general listing of the required tasks and expectations of the position and in no way implies that the duties listed above are the employee’s only responsibilities. The employee is expected to perform other tasks, responsibilities and training as instructed by their supervisors. Duties and responsibilities may change at any time with or without notice.

This position may require additional hours outside of the standard work schedule including occasional holiday, evening and/or weekend hours in order to meet deadlines or to accommodate customers.

LightBox and all its holding companies are an equal opportunity/affirmative action employer. It is the policy of the LightBox and its holding companies to prohibit discrimination of any type and to afford equal employment opportunities to employees and applicants, without regard to race, color, religion, sex, national origin, age, disability, or veteran status.                 

NO TELEPHONE CALLS OR AGENCY SOLICITATION PLEASE.