Cyber Security Analyst

Sensiple - New York, NY

Full-time - Mid Level

New York, NY

Professional, Scientific, and Technical Services

About the position

The Cyber Security Analyst position at Sensiple Inc. involves protecting computer systems, networks, and data from cyber threats. The role requires a combination of technical expertise in cybersecurity, cloud administration, and risk management, with a focus on identifying and mitigating complex IT threats. The analyst will work both onsite and remotely, collaborating with various teams to ensure the security of cloud infrastructure and compliance with security standards.

Responsibilities

• Identifying and mitigating complex IT technical threats to computer systems, networks, and data.
• Using technical IT tools and software to monitor, analyze, and defend against cyberattacks.
• Monitoring and analyzing network traffic, configuring firewalls, and conducting vulnerability assessments.
• Managing and protecting endpoints from malware, ransomware, and other threats.
• Investigating security incidents and implementing corrective actions to prevent future occurrences.
• Utilizing SIEM tools to collect, correlate, and analyze security event data for threat detection.
• Monitoring and analyzing emerging threats and vulnerabilities to proactively defend against cyber threats.
• Performing penetration testing.
• Keeping abreast of the latest security, privacy, and regulatory concerns impacting third-party risk management.
• Advising on changes requested by third parties to security and privacy provisions of agreements.
• Collaborating with IT project management to design secure cloud infrastructure plans.
• Performing analysis on the security of cloud services such as AWS, Microsoft Azure, and Google.
• Providing subject matter expertise on cloud security, automation, and virtualization.
• Developing, documenting, and validating policies and procedures related to cloud security.
• Developing cloud security metrics to analyze risks and identify opportunities to reduce vulnerabilities.

Requirements

• A bachelor's degree in information technology or computer science.
• An industry recognized certification in information security and privacy (e.g., CISSP, GIAC, CISM, CISA, CIPP, CTPRP, CCSP).
• A minimum of three years of experience in an IT or computer-related field.
• At least three years of hands-on technical experience in cloud administration.
• At least one year of experience with Cloud Cybersecurity efforts aligned with the Risk Management Framework (RMF).
• Experience in applying information security and privacy fundamentals and risk management frameworks such as NIST, FISMA, or ISO 27000.
• Experience with vendor risk assessment methodologies like SSAE 16, SOC 2, and FedRAMP.
• Technical IT expertise in network protocols, operating systems, programming languages, encryption techniques, and intrusion detection systems.
• Excellent oral and written communication skills to convey technical concepts to all levels of the organization.
• Proficiency in designing and implementing effective information security controls with minimal oversight.
• Strong organizational and prioritization skills.

Nice-to-haves

• Experience with Governance, Risk, and Compliance (GRC) and vendor risk management tools.
• Acute attention to detail with a high level of data integrity and accuracy.

Benefits

• Long-term contract position with potential for extension.
• Opportunity to work in a dynamic and diverse environment.