Information Security Analyst

Fairway Independent Mortgage Corporation - Carrollton, TX

Full-time - Mid Level

Carrollton, TX

Credit Intermediation and Related Activities

About the position

As the Information Security Operations Engineer at Fairway Independent Mortgage Corporation, you will play a crucial role in maintaining and enhancing the security posture of the organization. Your primary responsibilities will include monitoring, analyzing, and responding to security incidents, as well as planning and implementing information security tools to support the Security Operations Center (SOC). Depending on your experience level, your responsibilities may range from entry-level tasks to more advanced strategic planning, architecture, and implementation of security measures. In this role, you will be responsible for security monitoring and incident response, which involves monitoring security events and alerts from various sources such as SIEM and IDS/IPS. You will investigate and respond to security incidents promptly, ensuring that the organization is protected against potential threats. Additionally, you will collaborate with stakeholders to gather, analyze, and document security requirements for various projects and initiatives, ensuring that security is integrated into project lifecycles. You will also assist in conducting research to identify the latest security tools and technologies that align with the organization's needs, and participate in proof-of-concept evaluations to test the effectiveness and compatibility of these tools. Your role will include performing regular vulnerability assessments and penetration tests, working with IT teams to remediate identified vulnerabilities, and documenting security incidents and responses. Furthermore, you will contribute to security training and awareness programs, staying updated with the latest security trends and technologies, and providing training and support to SOC team members on new tools and technologies. Collaborating with the SOC team, you will identify security gaps and develop detailed implementation plans for new security technologies, ensuring that Fairway's security measures are robust and effective.

Responsibilities

• Monitor security events and alerts from various sources (SIEM, IDS/IPS, etc.)
• Investigate and respond to security incidents in a timely manner.
• Collaborate with stakeholders to gather, analyze, and document security requirements for various projects and initiatives.
• Analyze existing security frameworks, identify gaps, and recommend improvements aligned with industry best practices and regulatory requirements.
• Assist with working with IT Operations and Application Development to ensure security requirements are integrated into project lifecycles.
• Conduct research to identify the latest security tools and technologies that align with the organization's needs.
• Assist in proof-of-concept (PoC) evaluations to test the effectiveness and compatibility of security tools within Fairway's environment.
• Implement selected security tools, ensuring proper configuration and deployment within the organization's infrastructure.
• Continuously assess and improve security tools to ensure optimal performance and threat detection capabilities.
• Develop and maintain automation scripts and processes to streamline security operations and reduce manual efforts.
• Provide technical expertise during security incidents, aiding in the identification, containment, and resolution of security threats.
• Perform regular vulnerability assessments and penetration tests.
• Work with IT teams to remediate identified vulnerabilities.
• Document security incidents and responses.
• Generate regular security reports for management.
• Assist in the development and delivery of security awareness training programs.
• Stay updated with the latest security trends and technologies.
• Provide training and support to SOC team members on new tools and technologies.
• Collaborate with the SOC team to identify security gaps and plan for tool enhancements.
• Develop detailed implementation plans for new security technologies.

Requirements

• Minimum one (1) year of focused experience in information security
• Two (2) years of IT experience
• Security Training preferred: Security+, Pentest+, CYSA+, SSCP

Nice-to-haves

• CompTIA CySA+
• CompTIA Security+
• CompTIA PenTest+
• SSCP

Benefits

• Disability insurance
• Health insurance
• Dental insurance
• Paid time off
• 401(k) matching
• Employee discount
• Employee stock ownership plan
• Pet insurance