Information Security Specialist

SSAB AB

  • Montpelier, IA
  • 4 days ago

    Highlights

    Collect, and preserve digital evidence for analysis in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, supporting internal audit and legal teams. This would require the ability to walk, bend, kneel or stand, use of hands to finger, hold and handle, reach with hands and arms and to push/pull, lift or carry items up to 30 lbs.

    Numbers & Facts

    LocationMontpelier, IA

    Description

    ESSENTIAL FUNCTIONS

    Oversee and Govern

    • Prepare reports to keep organizational stakeholders apprised of security activities.
    • Plan, coordinate and implement components of existing security programs.
    • Support training and awareness program, assist in evaluations, planning future curriculum and managing users within the program
    • Develop detailed security documentation
    • Document cybersecurity countermeasures and risk mitigation strategies
    • Train colleagues on security protocols and best practices. Problem Solving

    Analyze

    • Determine the validity of trend data.
    • Advise Information management on risk levels and security posture.
    • Assess the effectiveness of cybersecurity measures utilized by systems
    • Develop content for vulnerability assessment tool(s).
    • Analyzing new methods used by cyber criminals

    Protect and Defend

    • Monitor potential targets for unauthorized access or use.
    • Validate intrusion facts and respond to incidents
    • Deploy defensive measures for Enterprise Infrastructure
    • Review results of network scans, conduct threats assessments and rank vulnerabilities based on risk
    • Determine deviations from baselines, acceptable configurations, assess the level of risks, and recommend appropriate countermeasures.
    • Work with the vulnerability management team to identify opportunities and assist in the coordination of mitigating countermeasures.
    • Conduct interviews of victims and witnesses to cybersecurity events.

    Investigate

    • Apply Tactics, techniques and procedures for a full range of investigative tools and processes as part of an Enterprise Incident Response team.
    • Collect, and preserve digital evidence for analysis in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, supporting internal audit and legal teams.
    • Test various security strategies and defenses

    Job Knowledge and Skills

    • Knowledge of network security and architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
    • Knowledge of basic system, network, and OS hardening techniques.
    • Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
    • Skill in applying host/network access controls (e.g., access control list).

    Teamwork

    • Able to work within a high performing cross-functional team environment
    • Accountable for own work & deadlines
    • Coordinate with other team members to resolve issues or complete project tasks

    Communication Skills

    • Provide initial user training including user documentation and training materials
    • Provide manager with weekly status updates and escalate issues if necessary
    • Communicate effectively with team members and users

    QUALIFICATIONS - Education, Experience and Competencies

    Required:

    • Associates degree in the field of computer science and or three years of equivalent work experience. Prior Experience in Networking, Software Development, Systems Engineering, Risk Analysis, Security Intelligence or IT Support.
    • High level or personal integrity demonstrated by an unblemished career history
    • Good Communication and management skills
    • Strong knowledge of written and spoken English, data pre-processing skill and presentation development.
    • Deeper knowledge of regulatory and compliance requirements.
    • Vulnerability Assessment skills
    • Regular and reliable attendance

    Preferred:

    • Certificate Program or professional Certificate or Volunteer work supporting information security.
    • Understanding of the NIST Cyber Framework and similar frameworks
    • One or more certifications within the information and cyber security area
    • Understanding of cryptographic solutions and standards.

    WORK ENVIRONMENT AND PHYSICAL DEMANDS

    • Operate in an office environment, routinely use standard office equipment such as computers, network tools/equipment, phones, photocopiers and scanners. This role is partially sedentary; however, some handling of materials is required. This would require the ability to walk, bend, kneel or stand, use of hands to finger, hold and handle, reach with hands and arms and to push/pull, lift or carry items up to 30 lbs.

    POSITION TYPE - WORK HOURS - TRAVEL REQUIREMENTS

    • Position is full time, exempt
    • Position works day shift, Monday through Friday - additional work as needed
    • Office presence required
    • Travel up to 10% of time in the field or at other SSAB locations

    OTHER DUTIES

    Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that may be required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

    Our Offer

    SSAB BENEFITS - starting at hire!

    Excellent Pay with Additional Bonus

    Very Affordable Health Insurance

    Blue Cross/Blue Shield Medical

    CVS/Caremark Prescription

    Delta Dental

    Superior Vision

    401(k) with Employer Match - 5%

    Profit Sharing

    10 Paid Holidays

    Vacation

    Company Paid Life Insurance - and STD and LTD*

    Optional Life, Hospital Indemnity, Critical Illness

    Healthcare and Dependent Care Flexible Spending Account (FSA)

    Tuition Reimbursement

    Employee Assistance Program

    Similar Jobs