Logo
1872 Consulting

IT Security Operations Analyst

1872 Consulting, Chicago, Illinois, United States, 60290


IT Security Operations AnalystChicago or Dallas Hybrid: 2 days remote, 3 days onsite

SummaryThe Security Analyst will support security operations and analysis of security related incidents, vulnerabilities, DLP and other security events. This role will enhance existing security tools and automations, with a focus on protecting our clients, systems, and data from internal and external threats.

What you'll be doingRepresent the security team in development and implementation of the overall security architecture.Act as the technical representative for organization security while engaging with other senior technical leaders throughout Revantage and associated portfolio companies in design and implementation of security solutions.Lead initiatives designed to share knowledge across security platforms and/or technology teams; Identify, recommend, coordinate, and deliver timely knowledge to support teams regarding technologies, processes, or tools.Develop and execute strategies to increase overall security knowledge throughout the organization.Monitor, analyze, and report on security detections from logging and monitoring systems.Client, triage, and document security detections based on threat intelligence.Understand, maintain, and update existing and contribute to new security tools for incident detection.Collaborate with portfolio company stakeholders to address client incidents.Work with various portfolio companies on audit requirements.Update monthly security metrics from various toolsets.Partner with the rest of the software engineering organization to patch security vulnerabilities.Work with management and business leaders to fulfill Information Risk Management's strategy.Monitor and triage requests from clients, document incident responses.Work with stakeholders throughout the company to understand their business needs and provide subject-matter knowledge and guidance.

Skills we're seeking3+ years of experience with IT Security, Cybersecurity, GRC or other related security experience.Experience with incident response.Experience with cloud-security – preferably Azure or AWS.Experience with threat assessments, vulnerability scanning and/or penetration testing.Firewall experience.

Nice to have experienceExperience with email security.Experience with DLP.Experience with identity and access management (IAM).Experience with vendor due diligence and assessing vendor security reviews.Experience with compliance requirements (GDPR, CCPA, SoX).Experience with our security toolsets (Qualys, Palo Alto, Azure Security Center).

#J-18808-Ljbffr