IS Security Analyst
Apply NowCompany: Southern States Cooperative.
Location: Richmond, VA 23223
Description:
Job Description
General Summary
Ensures that security is in place for all Southern States systems, handling day-to-day security operations and providing second or third tier support for security solutions/operations.
Essential Job Functions
Performs procedures necessary to ensure the security of all information systems in all environments (Data Center and Cloud). This includes the enforcement of system password policies and procedures on all platforms, working with Active Directory, Microsoft Entra ID, and extended Identity Management tools.
Performs all procedures required to protect systems from intentional or inadvertent access or destruction. This includes monitoring the Managed Detection and Response System for unusual activity, ensuring sensors are properly maintained and updated, and coordinating any action with the service provider.
Performs all procedures required to prevent a loss of Southern States data, including monitoring for unusual activity and coordinating any action with the service provider.
Interfaces with user community to understand their security needs and implements procedures to accommodate them. Provides second or third tier support as needed to address security operations.
Provides support for security permissions and access to internal resources, such as network shares, applications, and servers.
Conducts critical asset scans in hybrid environments using Nessus and facilitates cross-team patch management efforts.
Configures and manages Palo Alto Firewalls to investigate and respond to security incidents, establish firewall policies, control web application access, and oversee security-related change management projects.
Assists with Microsoft M365 security.
Assists in monitoring Internet usage and maintains the filtering software. Puts procedures in place to ensure that Internet policies from senior management are enforced. Provides reports on an as needed basis to management.
Interfaces with development managers to plan out security for various applications that are deployed in SSC to ensure overall security of assets and consistency across various areas.
Recommends tools/procedures to ensure appropriate security of technology assets.
Interfaces with other areas of compliance in the company to support those areas and ensure that our IS infrastructure supports those requirements (e.g. PCI Compliance, DHS needs, banking, etc.).
Works with the IS Team Lead, other members of IS Management and Infrastructure services, and auditors to ensure policies are followed and areas of compliance are met.
Perform all other job functions as assigned.
Scope
Provides technical expertise in all aspects of systems, network, and data security.
Requirements
Qualifications
Education: Requires either a High School or General Education Diploma.
Certification: CompTIA A+, CompTIA Network+, CompTIA Security+ are strongly desired.
Requirements
Ability to communicate verbally and in writing
Organization and planning skills are a must
Able to speak, read, write the English language in a proficient manner
Able to work extended hours to meet business demands
May require a valid driver's license
Work Environment
Primarily performs essential job functions in an office environment. May be required to drive/travel and work during adverse weather conditions. While traveling may have contact with hazardous materials.
Physical Activities Requirements
Continuously manual dexterity (fingers and hands) to manipulate, grasp, and handle, including repetitive motion; utilize eye/hand coordination, sit.
Frequently reach with arms and hands, stand, walk, turn and twist head/neck and back/waist; pull, push, lift, carry up to 35 pounds.
Occasionally balance, bend, climb, crouch, stoop; pull, push, lift, carry up to 50 pounds.
Must be able to communicate with customers and counterparts regarding business and technical matters. Specific vision abilities required by this position include: close vision, distance vision, color vision, peripheral vision, depth perception and the ability to adjust focus.
Tools Equipment
Able to utilize a computer, printer, copier, fax, calculator, manuals, spreadsheets and forms, writing instrument, telephone and related office equipment and systems.
General Summary
Ensures that security is in place for all Southern States systems, handling day-to-day security operations and providing second or third tier support for security solutions/operations.
Essential Job Functions
Performs procedures necessary to ensure the security of all information systems in all environments (Data Center and Cloud). This includes the enforcement of system password policies and procedures on all platforms, working with Active Directory, Microsoft Entra ID, and extended Identity Management tools.
Performs all procedures required to protect systems from intentional or inadvertent access or destruction. This includes monitoring the Managed Detection and Response System for unusual activity, ensuring sensors are properly maintained and updated, and coordinating any action with the service provider.
Performs all procedures required to prevent a loss of Southern States data, including monitoring for unusual activity and coordinating any action with the service provider.
Interfaces with user community to understand their security needs and implements procedures to accommodate them. Provides second or third tier support as needed to address security operations.
Provides support for security permissions and access to internal resources, such as network shares, applications, and servers.
Conducts critical asset scans in hybrid environments using Nessus and facilitates cross-team patch management efforts.
Configures and manages Palo Alto Firewalls to investigate and respond to security incidents, establish firewall policies, control web application access, and oversee security-related change management projects.
Assists with Microsoft M365 security.
Assists in monitoring Internet usage and maintains the filtering software. Puts procedures in place to ensure that Internet policies from senior management are enforced. Provides reports on an as needed basis to management.
Interfaces with development managers to plan out security for various applications that are deployed in SSC to ensure overall security of assets and consistency across various areas.
Recommends tools/procedures to ensure appropriate security of technology assets.
Interfaces with other areas of compliance in the company to support those areas and ensure that our IS infrastructure supports those requirements (e.g. PCI Compliance, DHS needs, banking, etc.).
Works with the IS Team Lead, other members of IS Management and Infrastructure services, and auditors to ensure policies are followed and areas of compliance are met.
Perform all other job functions as assigned.
Scope
Provides technical expertise in all aspects of systems, network, and data security.
Requirements
Qualifications
Education: Requires either a High School or General Education Diploma.
Certification: CompTIA A+, CompTIA Network+, CompTIA Security+ are strongly desired.
Requirements
Ability to communicate verbally and in writing
Organization and planning skills are a must
Able to speak, read, write the English language in a proficient manner
Able to work extended hours to meet business demands
May require a valid driver's license
Work Environment
Primarily performs essential job functions in an office environment. May be required to drive/travel and work during adverse weather conditions. While traveling may have contact with hazardous materials.
Physical Activities Requirements
Continuously manual dexterity (fingers and hands) to manipulate, grasp, and handle, including repetitive motion; utilize eye/hand coordination, sit.
Frequently reach with arms and hands, stand, walk, turn and twist head/neck and back/waist; pull, push, lift, carry up to 35 pounds.
Occasionally balance, bend, climb, crouch, stoop; pull, push, lift, carry up to 50 pounds.
Must be able to communicate with customers and counterparts regarding business and technical matters. Specific vision abilities required by this position include: close vision, distance vision, color vision, peripheral vision, depth perception and the ability to adjust focus.
Tools Equipment
Able to utilize a computer, printer, copier, fax, calculator, manuals, spreadsheets and forms, writing instrument, telephone and related office equipment and systems.