Security Analyst

MVP Consulting

One Commerce Plaza Albany, NY

JOB DETAILS
SKILLS
Analysis Skills, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Computer Security, Computer Systems, Consulting, Email Technology, Financial Services, GSEC - GIAC Security Essentials Certification, Information/Data Security (InfoSec), Internet Security, Loss Prevention, Phishing, Reporting Dashboards, Securities and Exchange Commission (SEC), Security Analysis, Security Attacks, Security Information and Event Management (SIEM), Security Software
LOCATION
One Commerce Plaza Albany, NY
POSTED
1 day ago
HBITS: HBITS-08-14913

Expert, Security Analyst

30 month contract

Interview: Virtual Interview

Work model: 50% telecommuting, 50% Office per week

--- Project Description ---
The Security Analyst will directly support the New York State
Department of Financial Services (DFS) Information Security Program,
responsible for ensuring the confidentiality, integrity, and availability of
information and safeguarding information technology resources at DFS

--- Day-to-Day Tasks ---
1. 1. Monitor work queue, and research and address information security
related user requests and process security exceptions
2. 2. Perform daily review of system security logs, and create analysis
dashboards and reports
3. 3. Work with stakeholders to improve Data Classification, Sensitivity
Labeling, and Data Loss Prevention tasks
4. 4. Continuous learning and evaluation of new techniques and
technologies
5. 5. Identify and investigate cybersecurity incidents following approved
practices and procedures
6. 6. Engage with internal and external entities as directed to improve
security posture and reduce information security risks

--- Required Qualifications ---
" 84 months of experience using SIEM tools and performing log analysis
" 84 months of experience in evaluating vulnerability assessments
" 84 months of experience in software security assurance
" 84 months of experience investigating security events and/or incidents;
A security event is an observable occurrence in the operation of an
organization that could have security consequences; these could include,
but are not limited to, anomalous logins, triggering of an EDR tool,
opening/responding to a phishing email, computer system instability, etc.
These are investigated to determine if they are indicative of a security
incident.
" Cybersecurity Certifications (e.g. SEC+, GSEC, CISSP, CISA or CISM)
" Bachelor s Degree or higher

MVP Consulting Plus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. Reasonable accommodations are available for qualified individuals with disabilities during the application process.

About the Company

M

MVP Consulting