Information Security Analyst I

Summary:

Participates in implementing, testing, monitoring, and reviewing clients’ information security and security operations programs to protect information assets and mitigate risks for unauthorized access, disclosure, and misuse. Responsible for desktop, server, mobile, IoT, data, and network security along with performing audits, reviews, troubleshooting, vulnerability and penetration testing, initial triage and monitoring of endpoint and network activity. Maintains information security standards, practices, and ensures controls are in place to adequately mitigate risk to clients’ infrastructure. Enables proactive, comprehensive, and consistent technology and information-related risk management practices according to Pacxa’s policies and procedures.

Duties:

Security Operations & Monitoring (35%)

• Proactively monitor and identify security risks, vulnerabilities, exposures, and incidents.
• Implement, administer, and monitor security tools and practices.
• Support security tools such as SIEM, firewalls, endpoint protection software, backups, and patch management systems.
• Monitor security trends, technological developments, and emerging practices in the IT industry to share externally and internally.
• Update software with the latest security patches to ensure proper hardening.

Incident Response & Threat Management (30%)

• Perform security incident response, investigation, and remediation.
• Defend systems against unauthorized access, modification, and destruction.
• Perform vulnerability and penetration testing.
• Install, administer, and troubleshoot security solutions.

Security Governance, Policies & Compliance (20%)

• Implement and review network security policies, application security, access control, and corporate data safeguards.
• Analyze security/compliance requirements and implement appropriate recommendations to increase security posture.
• Provide security awareness training.
• Create and maintain documentation related to daily tasks and client environments.
• Identify and suggest possible improvements to procedures or solutions.

Professionalism, Collaboration & Administrative Responsibilities (15%)

• Establish and maintain cooperation, understanding, trust, and credibility with colleagues and clients.
• Participate in after-hours on-call rotation to provide 24/7 support and respond to incidents promptly.
• Maintain daily schedule and productivity to company standards, including daily tracking of time in PSA.

Qualifications:

• Bachelor’s degree in IT related field preferred.
• Minimum of 2 years of experience performing technical support in an IT environment
• Knowledge of Security tools/platforms (penetration testing, endpoint protection, SIEM, XDR)
• Experience with Network administration (Firewall, Switches, Wireless) 
• Experience with BCP/DR/Backups
• Experience with Windows server/desktop environment, roles, features, operating systems, applications, networking, hardware, and printing
• Knowledge of CMMC, NIST 800-171
• Experience with RMM, PSA, and other MSP tools

An equivalent amount of education, experience and/or training will be considered.