Associate IT Security Analyst

At Weber Blackstone, we believe the best moments happen outdoors while enjoying delicious food with your favorite people. We lead the industry in innovation, design, and consumer delight, and we're fueled by people who are curious, bold, and collaborative. Whether you're a seasoned pro or exploring a new craft, we want Weber Blackstone to be the spark that ignites your next career move. Join us on our journey to create world class products that redefine and reimagine outdoor cooking and deliver exceptional experiences for generations to come. Come be part of our BBQ!

Role Overview

Summary:
The Associate IT Security Analyst is a junior member of the Information Security team and will work closely with members of the broader IT Infrastructure team. The role will function at the entry-level assisting in the administration of IT security services across Weber's enterprise network including security analysis, incident response, threat management, identity and access management, risk and compliance, network security management, endpoint management, and performs related duties as required. In this role, you'll have a unique opportunity to operate and improve Weber's evolving security program. We're looking for a Security Analyst who can learn quickly and can execute security operations processes across a broad set of security disciplines and domains.

If you're up for learning new security processes, investigating phishing emails, ensuring security applications are running effectively, processing incoming tickets, and supporting security and fraud incident investigations, then this could be a potential fit. We're looking for someone who is hungry to learn more about Information Security, is comfortable wearing multiple hats and has a learning mindset to grow and develop in this role.

This is an onsite role at our Headquarters in Providence, UT campus.

Essential Duties and Responsibilities:

• Monitors intrusion detection systems and security toolsets for the identification of suspicious and malicious activities and inadequate security practices across the network (e.g., analyzes network traffic, vulnerability scans, identification of computer viruses, unauthorized user activity) which may compromise the confidentiality, integrity, and availability of systems and data
• Consistently execute security operations processes; security application administration, respond to tickets, and incident response related tasks
• Supports Information Security projects and issues (e.g., application research/selection, system upgrades and installation, new technology initiatives)
• Assists the Information Security & Risk Manager with the monitoring and analysis of threat intelligence data
• Collaborate with internal teams to support security standards and processes
• Assists IT Infrastructure team with patching of servers
• Documents and manages the support of identity and access management capabilities
• Assists in the development and coordination of enterprise-wide security training, communication, and outreach efforts
• Collaborates with technology partners, support representatives, and IT management to coordinate and remediate security risks
• Keeps abreast of security related technology, best practices, and regulations
• Prepares technical and status reports for management review
• Supports activities related to vendor management & contract management, performing appropriate analysis
• Assists with creating and maintaining security policies, standards and procedures
• Role may require occasional off-hour response to security incidents and/or to collaborate with other regions

Qualifications:

• 3-5 years experience in Information Technology
• Entry-level Cybersecurity certifications such as ISC2 Certified in Cybersecurity (CC), CompTIA Security , or the Google Cybersecurity Certificate are preferred
• Experience with Microsoft Azure/Entra a plus but not required
• Basic knowledge of Information Security controls a plus; think CIS Top 20
• Excellent analytical and creative problem-solving skills
• Detail oriented, self-motivated and organized
• Passionate about learning new skills and technologies; cybersecurity is a constantly evolving field
• Ability to work independently and in team environments
• Ability to document information logically and thoroughly
• Ability to effectively multi-task in a high stress and time sensitive environment; responding to security incidents requires swift action, coordination with others, systems analysis, complex problem solving, and often quick judgement and decision making
• Some knowledge of Windows systems administration and/or networking concepts

Benefits:

• Medical, dental, and vision coverage
• Life and disability insurance
• Employee Assistance Program (EAP)
• 401(k) with company match
• Eligible for paid time off (vacation, sick, personal, holiday)