Cyber Security Analyst

Reporting

• Reports to: Director of Security and Enterprise Infrastructure

• Directs: None

Responsibilities

• Develop, implement, and maintain the company’s security documents (policies, standards, guidelines, and procedures.)

• Develop, document, and verify security baseline configurations on Cooperative-owned assets.

• Create a culture of security awareness by leading and enhancing cyber safety training.

• Maintain and manage the Security Information and Event Monitoring solution to monitor server logs, firewall logs, and network traffic for unusual or suspicious activity.

• Administrate and maintain the antivirus/endpoint detection and response solution.

• Monitor the IPS/IDS for anomalous traffic patterns.

• Perform risk assessments and testing of enterprise technology infrastructure.

• Perform vulnerability scanning and provide recommendations to mitigate discovered vulnerabilities.

• Analyze Cooperative business requirements and provide objective advice on the use of enterprise security solutions.

• Maintain, update, and mitigate vulnerabilities within the Cooperative’s risk registry.

• Facilitate penetration testing and follow through with all mitigating actions.

• Implement security improvements by assessing current situations and evaluating trends.

• Create, maintain, and disseminate system documentation and Standard Operating Procedures for network and other duties.

• Work with all Cooperative employees to realize enterprise approach to security.

• Work with third parties accessing enterprise infrastructure to promote awareness and minimize risk to the Cooperative.

• Understand the latest attack techniques and propose appropriate countermeasures.

• Assist in special projects, as necessary.

Education and Experience

• Bachelor’s degree in Cybersecurity or other related IT field or related experience and/or training or equivalent.

• Certified Ethical Hacker certification is preferred.

• Previous working experience with a Security Information and Event Monitoring solution and reviewing Windows logs.

Required Skills and Abilities

• Must be able to maintain professionalism and control under all circumstances.

• Has and maintains a valid driver’s license and acceptable driving record and is able to operate SVEC vehicles.

• Must become and remain certified in CPR and first aid. Must also be skilled in the use of all safety equipment.

• Proficient in Microsoft Office products including Excel and Word.

• Strong verbal, written, analytical and interpersonal skills.

• Ability to dissect and resolve complex problems quickly and systematically.

• Organized, keen attention to detail, and efficient.

• Ability to conduct research into IT security issues and products as required.

• Analytical/logical thinking ability.

• Ability to assemble facts in a clear, understandable manner.

• Team-oriented and skilled in working within a collaborative environment.

• Maintain high level of confidentiality with regards to associate, member-owner, and corporate information.

• Possess effective techniques to research and access all sources necessary to fulfill position responsibilities.

• Must have access to reliable transportation to and from work.

Physical Requirements

• Participation in SVEC job safety and training programs, relevant workshops, seminars and other SVEC sponsored courses and events.

• Must be able to use office equipment including telephone, computer, and other systems and related software in the performance of position responsibilities.

• Must be able and available, during all types of weather conditions, to work weekends, holidays, evenings, and other times outside normal duty hours to assist in service restoration and other emergencies that may arise or when the workload demands.

• Must always maintain an operating telephone or personal communication device at his/her place of residence. Ability to contact the telephone or personal communication device must be made available to SVEC for the purpose of contacting the manager to conduct legitimate routine and/or emergency business.

• This position is primarily inside work. Must be able to work up to eight hours per day at a computer.

• This position involves primarily inside work. Must be able to lift objects unassisted (up to 30 pounds). Some standing, walking, climbing, balancing, stooping, kneeling, crouching, or crawling to a minimal degree.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.

Pay Range: $75,439.26-$100,900.02 annually
Actual compensation within this range will be based on the applicant’s experience, education, and relevant certifications.