Information Security Analyst

JOB SUMMARY: The Information Security Analyst will possess creative problem-solving skills to ensure security policies, procedures, standards and best practices are in place. They will champion, support, and provide guidance to the Information Security Program, be involved in the day-to-day administration, operational duties, and reporting of the security program. Ideally, the analyst will be detail oriented, self-motivating, knowledgeable in basic scripting, networking protocols, cloud services, user management, security frameworks/fundamentals, common security tools, and standard operating systems.

• Work under the guidance of management to design and implement security solutions and protections to protect company’s technology assets


• Monitor, analyze, and respond to alerts from security-related tools and systems for detecting security incidents; investigate violations and escalate as appropriate


• Implement and configure security tools (identity and access management, vulnerability & patch management, network security, etc.) which automate common security processes


• Work under the guidance of management to execute vulnerability scans, review for abnormalities, collaborate with other users to remediate findings, and track through remediation


• Research, recommend, and ensure the timely deployment of security patches to operating systems, applications, and devices


• Work with other IT teams to create and maintain inventory of technology assets, including servers, computers, cloud services, software, libraries and middleware, etc.


• Research and recommend configuration standards for company’s technology assets; ensure compliance to configuration standards


• Perform administrative and operational duties pertaining to DLP, EDR, Phish/Spam, user account administration, IDS/IPS, SIEM


• Work with Development teams to integrate security testing tools


• Assist other technology teams in the design and implementation of business continuity and recovery, ensuring system and data availability, confidentiality and integrity


• Perform reviews on firewall, routers and other networking devices and validate configurations


• Create security metrics and generate reports


• Document information security processes and procedures


• Work under the guidance of management to track security of 3rd party vendors and their compliance to company requirements


• Support audits and assessments by collecting and managing evidence, generating status reports, and tracking remediation of findings


• Assist in assessing company’s compliance to security and privacy frameworks such as NIST, CIS, ISO, GDPR, CCPA, CTPAT, etc.


• Work under the guidance of management to prepare and deliver Security Awareness Training Material(s)


• Recommend security enhancements to senior Security and IT staff


• Champion, train, and provide awareness about new security products and procedures


• Performs other duties as assigned by supervisor

MINIMUM QUALIFICATIONS:

• Attainment of a bachelor’s degree in Information Technology, Computer Science, Information Security, or related field


• Requires thorough knowledge of information security practices and technologies ordinarily acquired through 3-5 years of progressive experience in information technology and information security


• Information security and/or security risk management certification(s) required


• Ability to speak and write in a clear and understandable manner for internal and external relations


• Understand extremely complex verbal or written instructions


• Strong interpersonal and customer support skills


• Ability to analyze, make decisions, and solve problems


• Experience with network & infrastructure administration and BC/DR are strongly desired although not required


• Depending on location this position could require 20-25% travel.

LOCATION : Memphis, TN, Dallas, TX or Remote

 

MODE Transportation is a leading non-asset based, third-party logistics company focused on delivering truckload, less-than-truckload, intermodal, air, ocean, parcel and managed transportation services. Our company operates across North America through a network of highly qualified transportation professionals.