IT Security Analyst

The Recruiting Group - Hoffman Estates, IL

Full-time - Mid Level

Hoffman Estates, IL

Administrative and Support Services

About the position

The IT Security Analyst position is a critical role within our organization, responsible for safeguarding our information systems and ensuring the integrity, confidentiality, and availability of data. The successful candidate will assess and evaluate systems to identify weaknesses and assess risks, performing vulnerability testing to proactively address potential security threats. This role requires a strong understanding of security incident and event management, as well as the ability to analyze logs and network traffic to detect and respond to security incidents effectively. In addition to vulnerability assessments, the IT Security Analyst will be involved in reviewing security violation reports and logs, investigating possible security exceptions, and coordinating with internal teams or external agencies, including managed service providers, as necessary. The analyst will assist in the creation and implementation of security solutions, which may include conducting vendor risk assessments and implementing new or upgraded security measures or controls. Documentation of system or process changes is also a key responsibility. The role includes coordinating the development and delivery of security awareness programs to educate staff about security risks and opportunities. The IT Security Analyst must demonstrate the ability to analyze, triage, and remediate security incidents effectively, ensuring that the organization remains resilient against evolving threats. This position requires a proactive approach to security, with a focus on continuous improvement and adaptation to the changing security landscape.

Responsibilities

• Assess and evaluate systems to identify weaknesses and assess risk; perform vulnerability testing.
• Review security violation reports or logs, investigate possible security exceptions, and coordinate with internal teams or external agencies as needed.
• Assist in the creation and implementation of security solutions, including conducting vendor risk assessments.
• Implement new or upgraded security measures or controls, and document system or process changes.
• Coordinate the development and delivery of security awareness programs and educate staff about security risks and opportunities.
• Demonstrate the ability to analyze, triage, and remediate security incidents.

Requirements

• Bachelor's Degree and 3+ years of security-related experience in areas such as intrusion detection, incident response/handling, vulnerability management, etc.
• Understanding of Security principles, techniques, and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
• Moderate knowledge of networking fundamentals (TCP/IP, Network Layers, etc.).
• Moderate knowledge of malware operation and indicators.
• Moderate knowledge of the current threat landscape (threat actors, APT, cyber-crime, etc.).
• Moderate knowledge of security-related technologies and their functions (IDS, IPS, EDR, IRP, FW, WAF, SIEM, etc.).
• Moderate protocol analysis experience (Wireshark, tcpdump, Netwitness, Snort, Bro, etc.).
• Basic knowledge of audit requirements (PCI, HIPAA, SOX, etc.).
• Basic programming skills in various disciplines including scripting languages.
• Proficient skill of Microsoft Excel, basic skill of Microsoft Word, PowerPoint, and Outlook.
• Exceptional organization skills and flexibility working in a fast-paced setting.
• Remarkable customer service skills: good listener, excellent follow-up, and willing to support and help others.

Nice-to-haves

• Japanese or German knowledge is a plus.