Information Security Analyst II (Green Bay, WI)

Nsight - Green Bay, WI

Full-time - Mid Level

Green Bay, WI

Administrative and Support Services

About the position

Joining Nsight: Our family of companies provides complete telecommunications services, including wireless and fiber-based services to residential and business customers, along with tower erection and maintenance services in Wisconsin and Michigan's Upper Peninsula. Our commitment to customer service, local philanthropic efforts, and green initiatives makes us an employer of choice in the state of Wisconsin. We like to hire people looking to grow with an organization and those who are excited about the ever-changing telecommunications industry. What you'll be doing: The NSIGHT Security Analyst II is responsible for maintaining the cyclical process of identifying, classifying, reporting, remediating, and mitigating vulnerabilities. This includes the collection and aggregation of all security event log data, as well as the creation and monitoring of alerts and appropriate responses. You will plan and coordinate all activities of the corporate PCI DSS Sustainability Program, including quarterly reviews, documentation, processes, and procedures. Additionally, you will participate in design and lead security operation efforts. Customer Service: You will identify, collate, and normalize security event log sources, creating alerts, responses, and reports based on incident risk. Analyzing and scanning networks/systems for security vulnerabilities and configuration issues will be a key part of your role. You will create impact assessments and work with the necessary IT teams on remediation and risk mitigation. Collaborating with technical and business teams to maintain PCI DSS compliance is essential, as is creating, reviewing, and updating associated policies, procedures, and processes. You will also participate in the information security incident response team and report appropriate metrics (key performance indicators) to measure the security program and related processes for both vulnerability management and PCI DSS. Furthermore, you will create and maintain technical security documents, processes, and procedures, and participate in after-hours, weekend support as necessary. Additional related duties may be requested or required.

Responsibilities

• Maintain the cyclical process of identifying, classifying, reporting, remediating, and mitigating vulnerabilities.
• Collect and aggregate all security event log data.
• Create and monitor alerts and appropriate responses for security events.
• Plan and coordinate activities of the corporate PCI DSS Sustainability Program, including quarterly reviews and documentation.
• Identify, collate, and normalize security event log sources.
• Create alerts, responses, and reports based on incident risk.
• Analyze and scan networks/systems for security vulnerabilities and configuration issues.
• Create impact assessments and work with IT teams on remediation and risk mitigation.
• Collaborate with technical and business teams to maintain PCI DSS compliance.
• Create, review, and update associated policies, procedures, and processes.
• Participate in the information security incident response team.
• Report key performance indicators to measure the security program and related processes.
• Create and maintain technical security documents, processes, and procedures.
• Participate in after-hours, weekend support as necessary.

Requirements

• Bachelor's degree in information security or associated discipline plus at least 3 years of experience working with vulnerability management, or equivalent combination of education and experience.
• Broad knowledge of networking, infrastructure, and application technologies, including XDR (eXtended Detection Response) approach to log management, detection, alerting, and response.
• Strong analytical skills with the ability to identify potential risks and develop possible solutions.
• Understanding of PCI DSS requirements/controls, State Privacy Laws, etc.

Nice-to-haves

• Security certification is preferred (CISSP, CEH).

Benefits

• Competitive benefits package.