Information Security Analyst III

INSPYR Solutions - Houston, TX

Full-time

Houston, TX

Administrative and Support Services

About the position

The Information Security Analyst III is responsible for executing the cybersecurity incident response lifecycle, administering systems and processes owned by the cybersecurity team, and validating the efficacy of all systems and processes that impact the company's cybersecurity posture. This role requires a strong technical background in various areas of information security, including incident response, risk management, and secure architecture.

Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents.
• Administer technologies and processes owned by the cybersecurity team including web filtering, end-point protection, incident response, email security, and security awareness.
• Execute processes impacting cybersecurity including incident response, Information Security Risk Management (ISRM), secure architecture, identity, business continuity, end-point security, SIEM, web security, email security, and vulnerability management.
• Analyze current computer systems and procedures, designing information systems solutions for improved security and efficiency.
• Assess systems and networks to identify deviations from acceptable configurations and measure effectiveness against known vulnerabilities.
• Analyze technologies to ensure comprehensive protection against unauthorized access to networks and systems.
• Support automation and orchestration to maximize team efficiency and reduce routine tasks.
• Recommend changes to ensure compliance with regulatory requirements and privacy laws.
• Stay updated on the security industry threat landscape relevant to the company.
• Recognize personal developmental needs and seek coaching, networking, and training for continued success.
• Create a conducive working environment for communication, teamwork, and learning.
• Utilize open communication to uphold organizational standards, expectations, and goals.
• Assume responsibility for other duties as required or assigned.

Requirements

• Bachelor's degree in computer science, information assurance, Management Information Systems (MIS) or related field, or equivalent experience.
• 6+ years of technical hands-on security experience.
• Experience with information security incidents related to malicious websites, emails, malware, unauthorized access, Denial of Service, and password attacks.
• Hands-on experience with security solutions such as MS Windows Defender, MS Exchange Online Protection, MS Azure Security Center, MS Active Directory, Cisco Umbrella, Tanium, Cisco firewalls, Fortinet firewalls, Splunk, MS Azure Sentinel, or Rapid 7.
• Knowledge of security standards and frameworks such as NIST, NERC CIP, TSA Pipeline, PCI, and SOX.
• Experience with cloud security and DevSecOps.
• Strong written and oral communication skills.
• Solid organizational skills with the ability to multi-task and prioritize workload.
• Excellent judgment and decision-making skills in complex situations.
• High level of flexibility and integrity.

Nice-to-haves

• CEH Certified Ethical Hacker (CEH) preferred.
• GIAC Certifications preferred.
• CISSP (Certified Information Systems Security Professional) preferred.
• CISM (Certified Information Security Manager) preferred.