Cyber Security Analyst

Job Description

We are currently seeking a Cyber Security Analyst to enhance our Cyber Security team. This position requires an experienced professional with a proven track record of Cyber Security development achievements. Our ideal candidate exhibits a can-do attitude and approaches his or her work with vigor and determination. Candidates will be expected to demonstrate excellence in their respective fields, to possess the ability to learn quickly and to strive for perfection within a fast-paced environment.

Duties and Responsibilities

• Develops, Enhances and Executes security operations processes.
• Implements, configures and operates security network, system and data controls, monitoring and configuration management tools
• Manages and maintains technical controls and processes for PCI and ITGC compliance
• Performs analysis and interpretation of security and compliance issues
• Analyzing, monitoring, and correlating security event information from logs, endpoints, networks, and cloud environments, across multiple systems, applications, and users to detect and mitigate external and internal threats.
• Analyzes security event information, assesses risk and assists in development of mitigation plans
• Contributes to development of network and system devices security hardening standards and policies
• Works as a liaison between IT, the lines of business and Information Security to ensure full and complete operations of security controls and monitoring tools
• Operates security monitoring systems and responds to events and incidents as necessary
• Develops, enhances and executes security operations processes.
• Designs, develops, implements, and manages enterprise anti-virus and EDR systems software
• Operates security assessments tools and assists IT operations with remediation planning
• Contribute to development of Security Policies and Procedures and Hardening Documents for various security related and non-related infrastructure
• Communicate security-related concepts to technical and non-technical teams
• Provide mentorship to junior team members

Scope

• Staff supervision and development: No
• Decision making: Documentation, Policies, Procedures
• Travel: Up to 5%
• Flex Designation: Anywhere

Requirements

Education and Experience

• Bachelors in Information Technology, Information Security, Computer Science or equivalent
• Minimum 3+ years of overall experience working in Cyber Security/Information Security
• Minimum 2+ years of work experience with Incident Detection, Incident Response, and Forensics.

Skills

• Experience in design and development of Cyber Security methodologies and comply to Security standards
• Strong understanding of network concepts including TCP/IP protocol stack, HTTP and TLS, DDoS detection/prevention, Intrusion detection and prevention
• Experience with EndPoint Security applications including Anti-virus, EDR, Desktop Encryption, DLP etc.
• Experience with logging, alerting, log translation
• Experience with Firewalls (Functionality and Maintenance)
• Experience with IDS/IPS systems
• Proven ability in assessment and mitigation of vulnerabilities
• Experience securing VPN and Security Access Gateway technologies
• Experience threat modeling and attack analysis
• Experience with Data Discovery, Data Classification and DLP technologies
• Ability to develop quantitative, prioritized action plans to mitigate risk
• Ability to produces detailed documentation including data flow diagrams, logical diagrams, and physical diagrams as required.
• Excellent customer service skills
• Solid team player with a "can do" attitude
• Excellent written and oral communication and documentation skills
• Ability to work after hours and be on call schedule during designated periods
• Excellent communication and critical thinking skills and ability to work in a fast-paced environment.
• Ability to prioritize multiple projects and daily run-maintain tasks
• Proven ability in awareness of Cyber Security trends and Hacking Techniques
• Skills (Preferred / Desired) - Strong Linux fundamentals
• Security Certifications such as CISSP, GIAC, Offensive Security, Ethical Hacking, etc. a plus.
• CCNA, Palo Alto, Network+, Security+
• Additional Qualifications (behavioral traits, certifications, etc.) -

Physical Requirements
General office environment requiring ability to:

• Stand, walk, sit for extended periods of time .
• Speak and listen to others in person and over the phone and video conferencing.
• Use keyboard and read from computer screen and reports.
• The ability to lift up to 15 lbs.

Safety
Must be able to perform this job safely in accordance with standard operating procedures and good manufacturing practices, without endangering the health or safety of self or others.

About Harbor Freight Tools

We're a 45 year-old, $8 billion national tool retailer with the energy, enthusiasm, and growth potential of a start-up. We have over 1,500 stores in 48 states across the country and are opening several new locations every week. We offer our customers more than 7,000 tools and accessories, from hand tools and generators to air and power tools, from shop equipment to automotive tools. We provide our customers with the right tool for the right job at the right price, always delivering quality and value.

The anticipated salary range for this position is $76,200 - 114,200 depending on location, knowledge, skills, education and experience. This position is also eligible for an annual discretionary bonus. In addition, we offer comprehensive and competitive benefits to Associates (and their families) such as medical, dental, vision, life insurance, short-term and long-term disability. Eligible Associates are able to enroll in our company's 401k plan. Associates will accrue paid time off up to 236 hours per year (inclusive of PTO, floating holidays, and paid holidays). Paid sick time up to 80 hours per year unless otherwise required by law.