Information Systems Security Analyst

Lucas Milhaupt - Cudahy, WI

Full-time - Mid Level

Cudahy, WI

Fabricated Metal Product Manufacturing

About the position

Lucas-Milhaupt, Inc. is seeking an Information Systems Security Analyst to join our team in Cudahy, WI. This role is pivotal in supporting our global infrastructure and systems maintenance under the direction of the IT Network and Systems Manager. The primary responsibility of this position is to assess information risk and facilitate the remediation of identified vulnerabilities across all of Lucas. The analyst will work towards achieving and maintaining NIST/CMMC2.0 Certification Compliance, which is essential for our operations in government standards. In this role, you will collaborate with team members to develop, implement, and maintain comprehensive information security plans and policies. As a project lead, you will coordinate the implementation of NIST/CMMC2.0 standards, ensuring that Lucas meets certification compliance. You will also identify architectural deficiencies and develop strategies to mitigate vulnerabilities, whether through existing automation tools or manual processes. Your expertise will be crucial in operating and analyzing security solutions, including advanced hardware security through the Meraki portal, such as MX Firewalls and intrusion detection systems. You will be responsible for the review and maintenance of security software, including Defender Anti-virus and CrowdStrike NextGen A/V, while staying informed about evolving security threats and trends. This proactive approach will enable you to mitigate security risks effectively. Additionally, you will coordinate IT security assessments, conduct network scans to identify vulnerabilities, and manage penetration tests to uncover exploitable weaknesses. Monitoring networks for security breaches and investigating incidents will be key components of your role, ensuring that you can respond effectively to any security events. You will also be tasked with maintaining and scheduling end-user cybersecurity training and awareness campaigns, supporting the IT Network and Systems Manager in infrastructure design and capacity planning, and assisting in the deployment and maintenance of IT systems.

Responsibilities

• Assess information risk and facilitate remediation of identified vulnerabilities.
• Develop, implement, and maintain information security plans and policies.
• Coordinate and implement NIST/CMMC2.0 for certification compliance.
• Identify architectural deficiencies and develop vulnerability mitigation strategies.
• Operate and analyze existing and future security solutions, including hardware security.
• Review and maintain security software such as Defender Anti-virus and CrowdStrike.
• Monitor networks and systems for security breaches and respond accordingly.
• Conduct and coordinate penetration tests to identify exploitable weaknesses.
• Investigate security breaches and conduct technical and forensic investigations.
• Communicate and report on significant security events and incidents to management.
• Maintain and schedule end-user cybersecurity training and awareness campaigns.
• Assist in the deployment, monitoring, maintenance, and support of IT systems.
• Interact with vendors and contractors to secure network products and services.
• Perform daily system monitoring and verify the integrity of hardware and systems.

Requirements

• Bachelor of Science in Information Technology, Computer Science, Information Systems, Mathematics, or related discipline.
• 5+ years of overall IT experience, with 5+ years in network administration and cybersecurity roles.
• Expertise in anti-virus software, intrusion detection, firewalls, and content filtering.
• Knowledge of risk assessment tools, technologies, and methods.
• Proficiency in planning, researching, and developing security policies, standards, and procedures.
• Strong technical knowledge of Telecommunications, Network, and PC Operating Systems.
• Excellent written and oral communication skills.
• Proven analytical, evaluative, and problem-solving abilities.
• Extensive experience working in a team-oriented, collaborative environment.
• Cybersecurity certifications such as AZ-500 Microsoft Azure Security or CISSP.

Nice-to-haves

• Experience with CrowdStrike Next Gen AV and Microsoft Defender XDR.
• Knowledge of disaster recovery and computer forensic tools.
• Experience with KnowBe4 cyber training.