Security Operations Center Analyst (Finance)

With limited direct supervision, performs day to day cybersecurity operations tasks, including initial incident triage, threat hunting, threat feed research, log reviews, and operational metrics collection and reporting.

Essential Position Responsibilities

Provides initial triage and incident response support for cybersecurity incidents. Continuously monitors and examines real-time alerts from intrusion detection systems, security incident event management systems, web application and next generation firewalls, endpoint protection systems, etc. Assists in keeping logs of and reporting on information security policy violations. Analyzes and evaluates security log data from dissimilar security systems.

Provides initial triage and incident response support for cybersecurity incidents. Continuously monitors and examines real-time alerts from intrusion detection systems, security incident event management systems, web application and next generation firewalls, endpoint protection systems, etc. Assists in keeping logs of and reporting on information security policy violations. Analyzes and evaluates security log data from dissimilar security systems.

Performs threat hunting exercises in conjunction with security analysts using both scenario-based threat hunts as well as hunting for threats using information collected by telemetry systems. Participates in tabletop exercises to regularly practice incident response capabilities.

Regularly reviews threat intelligence feeds by consuming data from multiple industry sources. Works with information security analysts to determine and recommend additional threat intelligence needs.

Provides support for identity governance and administration activities. Provisions and de-provisions access. Performs periodic reviews of security access. Assist in the development and maintenance of security roles and privileges. Conduct users access reviews and provide remediation when necessary. Conduct routine reviews of IAM security tools/technologies to insure effectiveness over the product life cycle.

Develops and maintains professional network and business relationships with vendors, peer organizations, and other business contacts. Must be able to manage vendor and outside technical support relationships for a multi-vendor environment.

Participates as a member of the Team: Participates in the ongoing development, communication and implementation of team concepts, programs and policies; coordinates work to ensure best practices with all team members. Attends appropriate team meetings. As a member of the Team, fosters strong cohesiveness regarding all major issues; e.g., direction, annual plan, budget, policy changes, etc. Accepts responsibility to quickly identify any areas that lack cohesiveness, bringing them to the attention of the team leader and working with the team in a supportive manner to resolve issues and actively look for ways, and reinforce actions needed, to achieve synergy possible within the larger organization.

Simmons Operating systems principles and objectives: Is familiar with Simmons' established operating systems (e.g. quality, security, office environment, company policies, LEAN); understands the responsibility to maintain familiarity with the systems and this position's role in support of these systems - including a consideration of the impact of individual actions on the systems and the responsibility to communicate concerns and improvement ideas.

Performs other duties as necessary in support of business objectives: This position description is intended to guide the activities of the person in this position and is not intended to limit the thinking and creativity of the person as to the work of this function. Nor is it intended that this describe all the work that may be required of the person in this position.

Physical Activities: Enters and locates information on a computer. Visually verifies information, often in small print. Communicates with Customers, Vendors, or Employees via telephone, in person, and/or electronic mail. May present information to small or large groups.

Personal Protective Equipment (PPE): As required by the facility being visited.

Travel: One to two offsite classes per year. Periodic travel to all Simmons locations via car or plane requiring overnight stay. Passport required.

Technical Experience: Knowledge of the following areas:

• Operations and maintenance of security systems
• Database and operating system security
• Firewalls, intrusion detection and prevention systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Network security and networking technologies and with system, security, and network monitoring tools. Solid understanding of network technologies and protocols.
• Understanding of security principles such as the CIA triad, the NIST cybersecurity framework, and defense in depth strategies.

Industry Experience: Experience in the manufacturing sector preferred.

Minimum Education: Bachelor's degree in Cyber Security, Computer Science, Information Systems, or related field, or 4 years related experience.

Preferred Education: None

We value military experience and welcome veterans to join our team.

#ZR1