Senior Security Analyst

•Internal and External Assessments Performing risk and security assessments for upgrades or newly proposed applications and technologies. Coordinating and performing internal security assessments Coordinating efforts of external security assessments •Risk Acceptance Process Evaluating risk acceptance requests and providing options for mitigating controls if needed. •System Security Plans - Developing, updating and reviewing System Security Plans •Incident Response Developing and updating IRPs (for business and control systems), playbooks, tabletop exercises and simulation). Incident response team member - and coordination following Incident Command Structure when appropriate Documenting incidents and after actions Managing after action items •Monitoring assets (e.g., servers, computers, devices, networks, applications) for potential security threats and vulnerabilities •Working with technical security systems such as SIEM, firewalls, endpoint security, vulnerability management, patch management, PKI, and cloud security management •Vulnerability Management - Managing and documenting mitigation efforts for identified vulnerabilities from security assessments, alerts/advisories, or other meansfrom start to finish. This includes the process of risk acceptance for any critical vulnerabilities not meeting the timeline to mitigate or unable to be mitigated. •Developing, deploying, and supporting security policies, standards, guidelines, and procedures to ensure ongoing security compliance. •Working knowledge and technical level understanding of cloud security strategy. Cloud security certification is a bonus •Working knowledge and proficiency in networking, domain administration, PAM, DLP, MFA, SOC applications, SIEM applications •Proficient in Python, and Power Shell for automation •Providing consultation on methods of protected confidential data, and critical systems and networks either on the business network or control systems networks •Working collaboratively with team members, but also able to work effectively with minimal supervision.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience •10+ years of experience in information security Working in: § Network security § SOC Analyst § Endpoint management § Vulnerability management § Cloud security § Incident response § Programming/scripting •Knowledge of control systems, security best practices, security frameworks and security controls, and compensating controls. Bachelor's degree in computer science or related degree from an accredited US College/University.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.