Information Security Analyst

$100,000 - $115,000/Yr

Technologie MVK - Danbury, CT

Full-time - Mid Level

Danbury, CT

About the position

The Information Security Analyst at MVK Tech is responsible for implementing and maintaining security protocols to protect the organization's information systems. This role involves conducting system audits, managing security measures, and collaborating with IT teams to integrate security practices into the development lifecycle. The analyst will also provide training on cybersecurity best practices and stay updated on the latest trends in cybersecurity.

Responsibilities

• Implement and maintain the Center for Internet Security (CIS) Controls framework.
• Manage security measures for information systems to prevent breaches and detect vulnerabilities.
• Conduct regular system audits to ensure compliance with security standards.
• Collaborate with IT teams to integrate security practices into the development lifecycle.
• Provide training and guidance to IT staff on cybersecurity best practices.
• Assist with updating and reviewing the System Security Plan (SSP).
• Develop controls such as firewalls, data leakage protection systems, and encryption.
• Evaluate, categorize, and remediate security events and vulnerabilities.
• Identify security gaps and propose enhancements to security controls.
• Participate in cybersecurity projects to ensure timely delivery and compliance with information protection requirements.
• Maintain relationships with Managed Security Services Providers.
• Own vulnerability management and implement remediation steps.
• Manage patching for servers and endpoints.
• Participate in on-call rotation for emergency events.

Requirements

• Bachelor's degree in information technology, compliance, information management, infrastructure, or information security.
• 5 to 7 years of work experience in a related field.
• Proficiency in AI and its application in data security.
• Experience managing Rapid7 and NextGen AV systems.
• Hands-on experience running AI models.
• Knowledge of information security frameworks such as CIS and NIST.
• Working knowledge of network security technologies including firewalls, VPN, and DLP.
• Experience with cloud security for AWS, Google Cloud Platform, or Azure.
• Prior experience in a HIPAA and FDA regulated environment is preferred.

Nice-to-haves

• Experience with identity access management systems (IAM).
• Prior experience managing EDR solutions.
• Experience with SIEM, configuration management, and vulnerability scanning.

Benefits

• Relocation assistance
• Health insurance
• Dental insurance
• 401(k)
• Tuition reimbursement
• Paid time off
• Vision insurance
• Flexible schedule