Cyber Security Analyst

Fxi - Radnor, PA

Full-time - Entry Level

Radnor, PA

Plastics and Rubber Products Manufacturing

About the position

As a Cyber Security Analyst at FXI, you will play a crucial role in safeguarding our information technology infrastructure and ensuring compliance with cybersecurity standards. Your primary responsibilities will include performing and actively monitoring cybersecurity risk assessments, ensuring that our security controls align with existing standards and our organizational risk appetite. You will conduct risk reviews and assessments of our security policies, processes, and configurations, verifying their compliance with applicable security standards. In this position, you will assist in the development and implementation of security standards and best practices, as well as administer security protection toolsets, which include email, endpoints, networks, firewalls, and related technologies. Collaboration is key, as you will work closely with technical team members, including architects, IT support technicians, and managed security service providers (MSSPs), to identify cybersecurity improvement opportunities and address operational issues. You will also support the implementation of security and privacy policies, procedures, and contractual language as required, and recommend enhancements to our security posture. Monitoring and administering detection and response capabilities, including Security Information and Event Management (SIEM) systems, will be part of your daily tasks. You will partner with external vendors to create, enact, and maintain incident response playbooks and capabilities. Additionally, you will fulfill a supporting role in collaboration with external partners for vulnerability assessments, penetration testing, and breach investigations. You will be responsible for creating, deploying, and monitoring cybersecurity awareness training and campaigns, ensuring compliance reporting is maintained. Your role will also involve ensuring that endpoints are current with security updates and patches, capturing and reporting on cybersecurity metrics and related risks, and preparing reports that document findings from security assessments and testing. In the event of security incidents, you will respond quickly and effectively, either independently or as part of a response team.

Responsibilities

• Perform and actively monitor cybersecurity risk assessments including compliance with existing standards, policies, and risk appetite.
• Conduct risk reviews and assessments of organizational security controls to verify compliance with applicable security standards.
• Assist with the development and implementation of security standards and best practices.
• Administer or support the administration of security protection toolsets, including email, endpoints, network, firewalls, and related technologies.
• Collaborate with technical team members to address cybersecurity improvement opportunities and operational issues.
• Support the implementation of security and privacy policies, procedures, or contractual language as required.
• Recommend security enhancements based on assessments and findings.
• Monitor and administer detection and response capabilities, including SIEM and similar tools.
• Partner with external vendors to create, enact, and maintain incident response playbooks and capabilities.
• Fulfill a supporting role in collaboration with external partners for vulnerability assessments, penetration testing, and breach investigations.
• Create, deploy, and monitor cybersecurity awareness training and campaigns, including compliance reporting.
• Ensure endpoints remain current with security updates and patches; capture and report on cybersecurity metrics and related risks.
• Prepare reports documenting findings from security assessments and testing.
• Respond to security incidents quickly and effectively, either independently or as part of a response team.

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, or other technology field, or equivalent.
• Strong preference for certification(s) in cybersecurity (e.g., CISSP, CCSP, CISA).
• 2-3 years of cybersecurity experience.
• Experience with EDR/XDR administration (Defender, CrowdStrike Falcon, etc.).
• At least one year of Microsoft 365 security administration experience.
• Experience with security awareness training administration (Microsoft Defender/Attack Simulation Training, KnowBe4, Proofpoint, etc.).
• Demonstrated experience with security operations including responding to and managing security incidents.

Nice-to-haves

• Familiarity with NIST Cybersecurity framework or similar.
• Familiarity with Microsoft Sentinel, Windows Defender, and Office 365 administration and security.
• Demonstrated commitment to continual learning in varied technology-related fields.
• Ability to communicate technical concepts to non-technical audiences.
• High level of interpersonal and communication skills.

Benefits

• Health insurance coverage
• 401k retirement savings plan
• Paid holidays
• Flexible scheduling options
• Professional development opportunities