Information Security Analyst

$100,000 - $115,000/Yr

Airavation - Danbury, CT

Full-time - Mid Level

Onsite - Danbury, CT

About the position

The Information Security Analyst is a critical role at the Danbury facility, focused on ensuring the integrity and security of data across both on-premises and cloud-based applications. This hands-on position involves resolving technical issues, implementing security measures, and maintaining compliance with security standards. The analyst will work closely with IT teams and provide training on cybersecurity best practices, while also staying updated on the latest trends in cybersecurity.

Responsibilities

• Implement and maintain the Center for Internet Security (CIS) Controls framework.
• Manage security measures for information systems to prevent breaches and detect vulnerabilities.
• Conduct regular system audits for compliance with security standards.
• Collaborate with IT teams to integrate security practices into the development lifecycle.
• Provide training and guidance to IT staff on cybersecurity best practices.
• Assist with updating and reviewing the System Security Plan (SSP).
• Develop controls such as firewalls, data leakage protection systems, and encryption.
• Evaluate, categorize, and remediate security events and vulnerabilities.
• Identify security gaps and propose enhancements to security controls.
• Participate in cybersecurity projects to ensure timely delivery and compliance with information protection requirements.
• Maintain relationships with Managed Security Services Provider.
• Own vulnerability management and implement remediation steps.
• Manage patching for servers and endpoints.
• Participate in on-call rotation for emergency events.

Requirements

• BA/BS degree in information technology, compliance, information management, infrastructure, or information security.
• 5 to 7 years of work experience in a related field.
• Analytical skills developed from training in Cybersecurity, Information Systems, or Computer Science.
• Experience managing Rapid7 and NextGen AV systems.
• Hands-on experience running AI models.
• Knowledge of information security frameworks such as CIS and NIST.
• Working knowledge of network security technologies including firewalls and VPNs.
• Experience with DLP, antivirus, antimalware, IDS/IPS, SIEM, and email security.
• Knowledge of security best practices including encryption and vulnerability scans.
• Ability to enhance the vulnerability management program and propose solutions for vulnerabilities.
• Familiarity with cloud security for AWS, Google Cloud Platform, or Azure.

Nice-to-haves

• Previous experience in a HIPAA and FDA regulated environment.

Benefits

• 401(k)
• Dental insurance
• Health insurance