The Sr. IT Security Analyst will be responsible for leading Cybersecurity operational efforts. This position will lead any internal resources and outsourced security vendors in monitoring for and responding to cyber security related incidents. The Sr. IT Security Analyst will oversee the vulnerability management program. The position will also lead threat intelligence and threat hunting efforts.

Primary Responsibilities:

• Manage various security providers on a daily basis to identify, analyze, and mitigate risks in the environment
• Maintain ownership of the vulnerability management systems, vendors, and processes
• Lead and conduct threat hunts, including gathering threat intelligence and proactively monitors systems
• Interact with IT team members to secure the environment and mitigate identified threats in a timely manner
• Manage and monitor all security tools employed within the organization
• Continuously maintain and update threat hunt tactics and techniques
• Remain current on cyber security trends and intelligence (open source and commercial) in order to guide the security analysis & identification capabilities of the organization
• Align standards, frameworks, and security with overall business and technology strategy
• Actively reviews the Information Security ticket queue and resolves or escalates assigned incidents on a timely basis
• Analyze file samples and web links to identify if they are malicious and determine steps to remediate and mitigate any threats posed
• Support security incident response and forensic investigations
• Support cyber security audits to support corporate, financial, and regulatory processes for networks, applications, endpoint devices, and communications
• Assist with the maintenance and annual testing of the Cyber Incident Response Plan
• Other duties as assigned

Education/Experience/Skills:

• Bachelor's degree in Information Technology or Cybersecurity, or related field
• Targeting 3 years of IT experience working with desktop/laptop technologies, networks, and cloud-based solutions; and 2 years within an operational cybersecurity role, preferably within the pharmaceutical or biotech industry
• Must have cybersecurity related certification (Security+, CCNP Security, SSCP, CISSP, etc.). An equivalent combination of relevant education and experience may be considered
• Excellent understanding of security logging, monitoring, and event management applications
• Strong knowledge of Information Security standards, practices, procedures, and tools
• Strong knowledge of threat intelligence gathering and threat hunting techniques
• Thorough knowledge of anti-virus/EDR and Windows security settings and controls
• Excellent understanding of desktop/laptop technologies including Windows, MS-Office, imaging tools, and BIOS updates
• Excellent understanding of software systems patching, management, and deployment solutions
• Knowledge of network support, VLANs, VPN, firewalls, and wireless
• Task-oriented, able to prioritize work or escalate issues to management
• Exhibit a high-level of attention to detail

Physical Requirements:

While performing the duties of this job, the employee is regularly required to stand; walk; sit; use hands to finger, handle, or feel; reach with hands and arms; climb or balance; stoop, kneel, crouch, see, talk or hear in a standard office environment and independently from remote locations. Employee must occasionally lift and/or move up to 15 pounds. Ability to travel independently overnight up to 20% of the time and work after hours if required by travel schedule or business issues.

#LI-MS1 #LI-HYBRID