IT Security Analyst

Io Datasphere Incorporated - Windsor charter Township, MI

Full-time - Mid Level

Windsor charter Township, MI

Professional, Scientific, and Technical Services

About the position

IO Datasphere, Inc. is seeking an IT Security Analyst to join our Vulnerability Management Team. This role is critical in ensuring the confidentiality, integrity, and availability of client data by reviewing and remediating cyber incidents and vulnerabilities identified by IT level analysts. The IT Security Analyst will be responsible for planning, scheduling, implementing, and maintaining scalable vulnerability scans using modern vulnerability management scanning tools, particularly for high complexity devices. The position requires a proactive approach to ensure that scanning is conducted safely and timely, with minimal or no impact on the scan targets. Troubleshooting technical issues related to scans will also be a key responsibility. In addition to vulnerability scanning, the IT Security Analyst will support vulnerability management scanning and reporting tools, conduct internal vulnerability audits of servers, network devices, applications, and other devices. The role involves interfacing with both internal and external auditors, providing detailed information on remediation efforts. The analyst will also be tasked with creating integrations of vulnerability management data with other client enterprise services, and conducting data analysis of vulnerability management data, often integrating it with other data sources to measure the effectiveness of vulnerability remediation. This includes working with large datasets that may be structured, semi-structured, or unstructured. The IT Security Analyst will interface with other agencies to make recommendations on improving security posture and reducing the number of security-related vulnerabilities. Conducting trend analysis, creating dashboards using data scripting to provide metrics on the performance of security responsibilities and controls, and generating new reports for management based on collected metrics across multiple agencies will also be part of the job. The analyst will escalate issues as appropriate and must possess the ability to work independently and efficiently, along with excellent communication skills. This position is hybrid, requiring the analyst to be onsite two days a week from day one, and candidates must be located in Dimondale, MI or within a 1-1.5 hour driving distance, as relocation is not allowed.

Responsibilities

• Plan, schedule, implement, and maintain scalable vulnerability scans using modern vulnerability management scanning tools for high complexity devices.
• Ensure safe and timely scanning with minimal/no impact on scan targets and troubleshoot technical issues with scans.
• Support vulnerability management scanning and reporting tools.
• Conduct internal vulnerability audits of servers, network devices, applications, and other devices.
• Interface with internal and external auditors, providing detailed information on remediation efforts.
• Create integrations of vulnerability management data with other client enterprise services.
• Conduct data analysis of vulnerability management data, often integrated with other data sources, to measure effectiveness of vulnerability remediation.
• Conduct trend analysis and create dashboards using data scripting to provide metrics on the performance of security responsibilities and controls.
• Generate new reports for management based on collected metrics across multiple agencies.
• Interface with other agencies to make recommendations on improving security posture and reducing security-related vulnerabilities.
• Escalate issues as appropriate.

Requirements

• 5+ years of IT Security Experience
• Experience with vulnerability management scanning and reporting tools
• Experience with trend analysis and creating dashboards using data scripting to provide metrics on performance

Nice-to-haves

• Excellent communication skills
• Ability to work independently and efficiently

Benefits

• Hybrid work schedule (2 days/week on-site)
• Opportunity to work with a reputable company in the IT security field
• Contract position for 1 year