Senior Security Analyst at Gulf Coast Automation Group in Bloomingdale, Illinois, United States

Job description

• This is an exciting opportunity to join our client as a Senior Security Analyst, where you will play a critical role in protecting enterprise information assets and advancing the organization's cybersecurity strategy. You'll partner with IT leadership and business stakeholders to design, implement, and enhance security controls while leading incident response, vulnerability management, and security initiatives across both on-premises and cloud environments.
• If you're a seasoned cybersecurity professional who enjoys solving complex security challenges, mentoring others, and staying ahead of evolving threats, we'd love to connect with you.

Responsibilities

• Collaborate with the Security team, IT leadership, business stakeholders, and executive leadership to develop and execute enterprise information security strategies.
• Protect the client's on-premises and cloud systems, networks, and applications from security threats and cyberattacks.
• Serve as the technical lead during security incidents, coordinating containment, investigation, remediation, and documentation.
• Research emerging threat actors, malware, tactics, techniques, procedures (TTPs), and indicators of compromise (IoCs).
• Assess, monitor, prioritize, and report on security vulnerabilities across the environment.
• Analyze security metrics and reports to identify trends and strengthen the organization's overall security posture.
• Perform digital forensic analysis as needed.
• Assist in developing and maintaining security standards, policies, procedures, and best practices.
• Participate in IT projects to ensure security requirements are incorporated throughout the project lifecycle.
• Evaluate emerging cybersecurity technologies and recommend solutions that improve the organization's security posture.
• Mentor and provide technical guidance to Security and IT team members.
• Participate in an on-call rotation and provide occasional after-hours support.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent combination of education and experience).
• 9+ years of progressive cybersecurity experience, including at least 10 years of security-focused work.
• SIEM
• Endpoint Detection & Response (EDR)
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Firewalls
• Secure Web Proxies
• Network security
• Penetration testing
• Patch management
• Vulnerability assessment and remediation
• MITRE Telecommunication&CK Framework
• Threat intelligence platforms
• Threat-led penetration testing
• Attack simulation
• Red Team / Blue Team exercises
• Experience managing multiple security tickets and priorities while communicating effectively with stakeholders.
• Experience using network monitoring and analysis tools.
• Strong understanding of security risks across both on-premises and cloud environments.
• Ability to build relationships with business partners and platform owners to proactively identify and mitigate security risks.
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CompTIA Advanced Security Practitioner (CASP+)

Skills

Required

• SIEM
• Endpoint Detection & Response (EDR)
• Firewalls
• Secure Web Proxies
• Network security
• Penetration testing
• Patch management
• Vulnerability assessment and remediation
• MITRE Telecommunication&CK Framework
• Threat intelligence platforms
• Threat-led penetration testing
• Attack simulation

Benefits

• The expected salary range for this position is $150,000-195,000 per year, depending on experience and qualifications. This role also qualifies for comprehensive benefits such as health insurance, 401(k), and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations.