Job Description

The IS Security team will evaluate, test, recommend, and maintain information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software. IS security must ensure cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall cyber security. Additionally, IS security is responsible for identifying security risks and exposures, determining the causes of security violations and suggesting procedures to halt future incidents and improve security through risk assessments and compliance audits. Knowledge or experience with evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks will help with success in this role. The Associate Analyst, IS Security will be located in the Raleigh, NC office, reporting to the Principal, IS Security.

Key Duties and Responsibilities

• Monitor the SIEM and related security tools for alerts, suspicious activity, and potential security events.
• Perform initial alert triage using established procedures, correlation information, and available security telemetry.
• Classify and prioritize alerts based on documented criteria and escalate suspicious, confirmed, complex, or high-risk activity to senior information security team members.
• Document security events, investigation notes, timelines, security reports, and supporting documentation.
• Assist with the administration and maintenance of security monitoring and cybersecurity tools.
• Participate in security investigations by gathering data, analyzing findings, and preparing summaries for senior team members.
• Maintain accurate records, security logs, incident reports, and compliance documentation.
• Perform other Information Security responsibilities appropriate to the position’s career level and operation needs.

Qualifications:

• Bachelor's degree in cyber security, or equivalent combination of education and experience
• Preferred Certifications: CompTIA Security+, CompTIA CySA+, or other related certifications
• Strong analytical, troubleshooting, and problem-solving skills