首席安全运营分析师
Principal Security Operations Analyst
Ascensus 是美国领先的独立技术和服务平台，为储蓄计划提供支持，提供产品和专业知识，帮助近 1600 万人口为更好的今天和明天储蓄
Section 1: 岗位概述
首席安全运维分析师将负责 Ascensus 范围内的运营安全职责
Section 2: 工作职能、核心职责和任务
- 对团队的效率和成功负责
- 在团队内部建立交叉培训，确保安全运维功能的可用性
- 安全事件监控与响应
- 监控所有工具来源的安全事件
- 分析事件并过滤误报
- 理解基本的网络服务、漏洞和攻击
- 事件响应流程及事件升级
- 与安全团队合作，改进并建立新的流程和程序
- 贡献并维护监控与响应相关的文档流程
- 与信息安全、IT、风险与治理、设施团队紧密合作
- 每季度报告安全运营指标
- 处理员工发送的钓鱼邮件升级
- 将事件与其他已知的社会工程尝试相关联
- 安全解决方案管理
- 构建、管理和维护工具，包括但不限于：
- IAM
- IPS
- SEIM
- Web 应用防火墙
- 防病毒、恶意软件和端点保护
- CASB
- UBA
- DLP
- Web 代理/网页内容过滤
- 漏洞管理
- 文件完整性监控
- 网络访问控制（NAC）
- 维护工具相关的文档
- 推动信息安全工具的使用，以最大化其功能
- 审核内容过滤、可移动媒体和例外情况的访问请求
- 与各类技术团队协作，实现安全目标
- 根据员工的兴趣和可用性，可能获得额外的安全经验：
- 评估和选择安全供应商或解决方案
- 识别新兴漏洞并评估相关风险
- 协助公司事件响应活动
- 安全测试（漏洞扫描、伦理黑客/渗透测试的部分内容）
- 详细配置审查
- 负责保护、安全和正确处理 Ascensus 所持有的所有机密数据，以防止未经授权的访问、不当传输和/或未经批准的信息披露，这些信息可能导致危害
查看英文原文
Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.
Section 1: Position Summary
The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.
Section 2: Job Functions, Essential Duties and Responsibilities
- Accountability for team’s effectiveness and success
- Establish cross-training within team for availability of SecOps functions
- Security Event Monitoring & Response
- Monitor security events from all tool sources
- Analyze events filtering for false positives
- Understanding of basic network services, vulnerabilities and attacks
- Incident response process and escalation of events
- Work with the security team to enhance and build new processes & procedures
- Contribute to and maintain documented processes around monitoring & response
- Work closely with information security, IT, risk & governance, and facilities teams.
- Report on security operations metrics quarterly
- Process phishing email escalations from Associates
- Correlate events with other known social engineering attempts
- Management of Security Solutions
- Build, manage and maintain tools including, but not limited to:
- IAM
- IPS
- SEIM
- Web Application Firewall
- Anti-Virus, Malware and Endpoint Protection
- CASB
- UBA
- DLP
- Web Proxy/Web content filtering
- Vulnerability management
- File integrity monitoring
- Network Access Control (NAC)
- Maintain documentation around tools
- Champion the information security tool’s usage to maximize features
- Review access requests around content filtering, removable media and exceptions
- Work collaboratively with the various technology teams to accomplish security objectives
- Additional security experience may be gained depending on associate’s level of interest and availability:
- Assessing and selecting security vendors or solutions
- Identify emerging vulnerabilities and evaluate associated risks
- Assisting in corporate incident response events
- Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
- Detailed configuration reviews
- Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
- Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
- Assist with other tasks and projects as assigned
Section 3: Experience, Skills, Knowledge Requirements
- Experience managing security tools noted above
- Experience with monitoring, detecting, and responding activities
- Knowledge of information security risks, at least technical aspects including working knowledge around remediation.
- Ability to lead, inspire and motivate associates on the team
- Ability to objectively review the team’s work, implement enhancements and monitor quality
- Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus.
- Highly organized and able to process and manage inventories of controls and findings.
- Excellent analytical and problem resolution skills.
- Self-starter and able to work independently.
- Persistence and strength to champion initiatives.
Minimum Requirements:
- A minimum of 5 years’ experience in Information Security or Security Operations
- Knowledge of networking preferred.
- Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
- Bachelor’s degree plus equivalent work experience required.
- CISSP certification preferred.
We are proud to be an Equal Opportunity Employer
Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.comemail addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.
Originally posted on Himalayas