Responsibilities
- Monitor security systems, tools, and dashboards to identify potential threats or vulnerabilities.
- Respond to cyber alerts/incidents from information security tools as a first responder.
- Assist in the analysis and investigation of security alerts, incidents, and breaches.
- Perform vulnerability scans and support the remediation of identified risks.
- Maintain and enforce security policies, procedures, and controls.
- Assist in the implementation of security awareness programs for employees.
- Support the management of user access controls and account reviews.
- Document and maintain records of security incidents and actions taken.
- Collaborate with IT teams to ensure systems comply with security standards and best practices.
- Stay updated on the latest cybersecurity trends, tools, and techniques.
- Identify and develop automations, integrations, and workflows around security monitoring, alerting, reporting, and remediation.
- Assist with internal and external information security and privacy audits.
- Assist with security awareness training and phishing campaigns.
- Keep abreast of relevant industry movements to provide recommendations for changes to enhance company security and prevent unauthorized access to systems or data.
- Assist as needed with Privacy Program requirements.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field (or 2+ years of equivalent work experience).
- Knowledge of basic cybersecurity concepts, threats, and controls.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication abilities.
- Ability to work independently and as part of a team.
- Familiarity with security frameworks such as ISO 27001
- Basic understanding of network protocols, operating systems, and cloud security.
Nice to Have
- Experience with security tools or technologies (e.g., antivirus, EDR/XDR, or SIEM) is a plus.
- Certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or similar (preferred but not mandatory).
