Information Security Analyst

Tech Heads, Inc. is a premier provider of innovative technology solutions, offering a comprehensive range of services, including managed infrastructure, managed cybersecurity, product reselling, and professional services. We empower businesses by delivering solutions that enhance operational efficiency, fortify security, and drive digital transformation.

Headquartered in Portland, OR, Tech Heads thrives on the expertise and dedication of its exceptional team. For 30 years, our success has been built on the foundation of talented individuals committed to delivering outstanding customer experiences. 

The Information Security Analyst's role is to protect Tech Heads managed security accounts from security threats. The Information Security Analyst should have excellent communication skills and the patience to communicate with a variety of interdisciplinary teams and users. The Information Security Analyst should be able to triage security incidents quickly and accurately. The ability to work in a team environment is essential. This position is on-site at our headquarters in Portland, OR.

Responsibilities

• Monitoring networks and systems for security breaches, suspicious activity, and other threats 
• Investigating security breaches and other incidents. Writing incident reports and delivering to customers
• Analyzing the effectiveness of security controls, and analyzing network traffic and activity logs for potential threats 
• Reporting on security breaches, attempted attacks, and other metrics 
• Building security standards and best practices, and developing procedures for incident response and disaster recovery
• Implementing security measures to address vulnerabilities and mitigate risks 
• Advising on security enhancements to management and helping users learn about new security products and procedures
• Auditing internal and external security controls
• Verifying third-party vendors' security and working with them to meet security requirements, including reviewing compliance documents such as SBOMs, SOC2, etc. 
• Keeping informed about the latest IT security trends and adversary tactics 

• A bachelor's degree in computer science, cybersecurity, or a related field.
• Minimum 2 years of proven experience working in an MSP/MSSP environment in a security analyst role. Alternatively, 2 years of experience as a SOC Tier II analyst or higher
• Expert level understanding of security policy settings within Microsoft 365.
• Expert level understanding of the business impact of policy settings within Microsoft 365
• Understanding of Microsoft licensing and security provisioning available at different licensing levels
• Resourcefulness and problem-solving aptitude
• Ability to work independently with limited supervision, self-starter, and the ability to take the initiative on new and existing projects. 
• Excellent Communication & Documentation skills
• Experience with analyzing information from a variety of alerting solutions
• Preferred certifications: Microsoft security certifications or other security certifications - Security+, Network+, Certified Information Systems Auditor (CISA), or Certified Information Systems Security Professional (CISSP)