Security Analyst IV - 2032

Security Analyst IV

Job ID: CER 2032

Location: Madison, WI, 53703

Schedule: Remote

• Candidate MUST be a WI resident or willing to relocate to WI prior to starting the role at their own expense. 100% remote within the State of Wisconsin.

Terms: 1099 or W2 (No C2C)

Compensation: Hourly Rates listed on SkillsMatrix

Instructions to Apply Online:

Go to certecinc.com/jobs

Look for the above Job ID & Click on it to find Job Details

You will find an URL to SkillsMatrix within the Job Description

Click on SkillsMatrix URL go to File > Select Download option > Select .doc version, Fill it & Save it

Now Click on "Apply Now" on the same Job Description page and fill all the required details (Mandatory: Resume, SkillsMatrix, LinkedIn)

Note: Applications via certecinc.com/jobs ONLY will be reviewed

We'll cut off considering resumes on 03/29 at Noon CST.

Our organization is seeking a highly experienced and skilled Security Analyst IV to join our dynamic security team. This senior-level role is critical in protecting our organization's information assets and ensuring a robust security posture. The Security Analyst IV will be responsible for leading and executing complex security assessments, incident response activities, and vulnerability management programs. This individual will serve as a subject matter expert, providing guidance and mentorship to junior analysts, and will play a key role in developing and implementing security policies and procedures.

Responsibilities:

• Lead complex security assessments, including penetration testing, vulnerability scanning, and risk assessments, to identify and mitigate security vulnerabilities.
• Develop and implement incident response plans, and lead incident response activities, including containment, eradication, and recovery.
• Manage and improve vulnerability management programs, ensuring timely identification and remediation of security weaknesses.
• Conduct in-depth security analysis of systems, networks, and applications to identify and address security threats.
• Develop and maintain security policies, procedures, and standards, ensuring compliance with industry regulations and best practices.
• Provide expert-level security guidance and mentorship to junior security analysts.
• Research and evaluate emerging security technologies and threats and recommend appropriate security solutions.
• Collaborate with IT and other departments to ensure security considerations are integrated into all aspects of the organization's operations.
• Perform forensic analysis and investigations of security incidents.
• Develop and deliver security awareness training to employees.
• Generate detailed reports and presentations on security findings and recommendations.

Qualifications:

• Bachelor's degree in computer science, Information Security, or a related field; Master's degree preferred.
• Minimum of 8-10 years of experience in information security, with a proven track record of success in security analysis and incident response.
• Extensive knowledge of security frameworks, standards, and best practices (e.g., NIST, ISO 27001, CIS).
• Strong understanding of network protocols, operating systems, and security technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
• Proficiency in security assessment tools and techniques, including penetration testing and vulnerability scanning.
• Experience with incident response and forensic analysis.
• Excellent analytical, problem-solving, and communication skills.
• Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP) are highly desirable.
• Experience with cloud security (AWS, Azure, GCP) is highly desired.
• Experience with scripting languages (Python, PowerShell, etc.) is highly desired.
• Experience with threat intelligence platforms is highly desired.

Top Skills & Years of Experience:

• Lead complex security assessments, including penetration testing, vulnerability scanning, and risk assessments, to identify and mitigate security vulnerabilities. (8 years)
• Develop and implement incident response plans, and lead incident response activities, including containment, eradication, and recovery. (8 years)
• Manage and improve vulnerability management programs, ensuring timely identification and remediation of security weaknesses. (8 years)

Nice to have skills:

• Strong understanding of network protocols, operating systems, and security technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
• Proficiency in security assessment tools and techniques, including penetration testing and vulnerability scanning.
• Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP) are highly desirable.