GENERAL DESCRIPTION OF WORK:

The Security Analyst’s role is to ensure the secure operation of the in-house computer systems, servers, and network connections. This includes checking server and firewall logs, scrutinizing network traffic, analyzing and resolving security breaches and vulnerability issues in a timely and accurate fashion, and conducting user activity audits where required.

ESSENTIAL FUNCTIONS:

Implements and enforces policies, procedures, guidelines, and associated plans for system security administration and user system access based on industry-standard best practices to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

Monitors all network system logs and traffic for unusual or suspicious activity, and investigates and documents all findings, and makes recommendations for resolution.

Performs risk and vulnerability assessments.

Researches security enhancements and makes recommendations to management.

Audits end user accounts, permissions, and access rights on various systems, servers, and file shares and documents findings.

Audits and ensures the security of databases and data transferred both internally and externally.

Keeps current with emerging security trends and issues.

Trains staff on network and information security procedures and best practices.

This job description excludes marginal functions that are incidental to performing the job. Other duties may exist.

EDUCATION AND EXPERIENCE:

Bachelor’s degree in Information Technology, Cyber-Security, or a closely related field, and 2 years experience in an IT field with involvement in security or an equivalent combination of education or experience.

Any industry-standard Security certifications are a plus.

ADDITIONAL REQUIREMENTS:

High level of analytical and problem-solving abilities.

Broad hands-on knowledge of industry-standard best practices.

In-depth technical knowledge of network operating systems and protocols.

Strong knowledge of network administration.

Strong hands-on experience with intrusion detection systems. Experience with Darktrace is preferable.

Knowledge of applicable practices and laws relating to data privacy and protection.

Knowledge of law enforcement practices and procedures is a plus.

Intuition and keen instincts to pre-empt attacks.

Must be able to conduct research into security issues and products as required.

Strong understanding of the security testing and assessment methodologies is preferred.

Strong interpersonal and oral communication skills.

Highly self-motivated and directed.

Strong organizational skills.

Excellent attention to detail.

Must be able to effectively prioritize and execute tasks in a high-pressure environment.

Must be able to work in a team-oriented, collaborative environment.

Must be able to maintain good work attendance.

Safety Accountability Statement:

- Employees must consider safety in all tasks performed, as well as demonstrate safe judgment and decisions that not only maintain their own safety; but that of fellow employees and customers.

- Demonstrate a professional commitment to assure compliance with all organizational policies, practices and programs; related to safety, health, and system security.

- Employees have a responsibility to identify and report hazards, as well as potentially unsafe conditions, to your immediate supervisor or Safety Department.

- Employees are responsible, and required, to stop a job/task to prevent an unsafe incident or act from occurring. This acknowledges the threat of potential injury, property damage and the opportunity for better judgment to be used.

Must support and comply with VIA’s EEO policies and the Diversity Program.

PHYSICAL REQUIREMENTS:

Dexterity of hands and fingers to operate a computer keyboard, mouse, and to handle other computer components.

Occasionally lifts and transports objects, such as servers and peripherals.

WORK ENVIRONMENT:

Sitting for extended periods of time.

Works within normal office environment.

Work involves deadlines and multiple priorities.