Information Security Analyst - Incident Management

Company: Prosum
Location: Pasadena
Posted on: November 16, 2020

Job Description:

Information Security Analyst - Incident Management Investigate and identify patterns of continued technical security issues and weaknesses and design solutions to prevent future reoccurrences. Advise internal lines of business and IT partners parties on how to remediate technical security issues and verify remediation activities. Responsible for in-depth technical security testing of company websites, infrastructure, and applications using a combination of automated manual commercial open-source tools. Responsible for Technical and Executive level reports on technical security issues. Design, document, and implement technical information security processes, procedures, guidelines, and solutions. Function as primary incident response handler directing IT and other departments during security incidents, including evidence preservation, corrective action, and preventive actions. Aid in the implementation, maintenance, and monitoring of the information security program into in-scope operational areas (gap analysis, risk assessment, third party assessments, procedurespecification development, execution of recurring procedures, incident response) Align with and support the execution of the Information Security Program vision and strategy Meet with project teams and other system architects to develop system designs and project plans that include the appropriate security controls and meet security standards Qualifications One or more of the following certifications strongly preferred CEH (Certified Ethical Hacker) or equivalent webapplication security testing qualification CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) ITSecurity Vendor Certifications (e.g. Cisco, Microsoft, RSA) Forensic experience or certification (EnCE and ACE) GIAC GSEC (Global Information Assurance Certification ndash Security Expert) GIAC GCIA (Global Information Assurance Certification ndash Certified Intrusion Analyst) GIAC GCIH (Global Information Assurance Certification ndash Certified Incident Handler) Total experience typically 5+ years in an Information Security position with the following minimums Three years of application security testing vulnerability testing Two years of experience in secure software development Two years of hands-on Unix experience Two years of hands-on infrastructure security Understanding of emerging technologies in IT such as Cloud Platforms and Mobile as well as the associated security risks. Working knowledge of common information technology management frameworks such as ISOIEC 27001, ITIL, COBIT, and NIST, as well as audit and SOC2 experience a huge plus.

Keywords: Prosum, Pasadena , Information Security Analyst - Incident Management, Executive , Pasadena, Texas