Information Security Analyst

Strivector Corp - Danbury, CT

Full-time - Mid Level

Onsite - Danbury, CT

About the position

The Information Security Analyst position at Strivector Corp is focused on ensuring the integrity and security of all data across both on-premises and cloud-based applications. The role involves resolving technical issues, implementing security measures, conducting system audits, and participating in cybersecurity projects. The analyst will also be responsible for managing security events and vulnerabilities, and will be part of an on-call rotation for emergency situations.

Responsibilities

• Ensure the integrity and security of all MannKind data across on-premises and cloud-based applications.
• Resolve technical issues from inception to resolution.
• Implement and maintain the Center for Internet Security (CIS) Controls framework.
• Manage security measures for information systems to prevent breaches and detect vulnerabilities.
• Conduct regular system audits to ensure compliance with security standards.
• Develop controls such as firewalls, data leakage protection systems, and encryption.
• Evaluate, categorize, and remediate security events and vulnerabilities.
• Identify security gaps and propose enhancements to security controls.
• Participate in cybersecurity projects to ensure timely delivery and compliance with information protection requirements.
• Be on call for emergency related events due to outages or cyber events.

Requirements

• BA/BS degree in information technology, compliance, information management, infrastructure, or information security.
• 5 to 7 years of work experience in information security or related fields.
• Analytical skills developed from training in Cybersecurity, Information Systems, or Computer Science.
• Experience managing Rapid7 and NextGen AV systems.
• Hands-on experience running AI models.
• Familiarity with information security frameworks such as CIS Framework and NIST.
• Working knowledge of network switches, routers, firewalls, and VPN.
• Experience with DLP, antivirus, antimalware, IDS/IPS, SIEM, and email security.
• Knowledge of cloud security for AWS, Google Cloud Platform, or Azure.
• Prior experience managing EDR solutions and SIEM.

Nice-to-haves

• Experience with identity access management systems (IAM).
• Knowledge of security best practices such as encryption and vulnerability scans.

Benefits

• Full relocation benefits offered.