Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field, or equivalent experience.
Four years of experience in cyber security, specifically in incident response and vulnerability management.
CompTIA Security+ certification, or willingness to obtain within six months of hire.
Advanced knowledge of security technologies, including firewalls and SIEM.
Proven analytical skills for problem-solving in cyber security scenarios.
Responsibilities
Monitor security systems for potential incidents and mitigate breaches.
Conduct vulnerability assessments and implement corrective actions.
Develop and enforce security policies to ensure compliance with regulations.
Perform risk assessments and recommend improvements.
Deliver security awareness training for employees.
Configure security systems to ensure proper hardening and patching.
Document security incidents and prepare reports for management.
Collaborate with IT and other departments to integrate security measures.
Benefits
Full-time position with opportunity for professional growth.
Continuous learning and development in emerging security technologies.
Collaborative work environment promoting cross-departmental communication.
Engagement in the gaming industry's specific security standards and regulations.
Full Job Description
Job Type
Full-time
Description
PURPOSE
The Cyber Security Analyst is responsible for protecting Snoqualmie Casino & Hotel's information systems and networks from cyber threats. This includes monitoring, analyzing, and responding to security incidents, conducting vulnerability assessments, and implementing security measures to safeguard the organization's digital assets. The analyst will work closely with the IT team and other departments to ensure compliance with security policies and regulatory requirements.
ESSENTIAL DUTIES / RESPONSIBILITIES
Security Monitoring and Incident Response: Continuously monitor security systems and alerts to identify and respond to potential security incidents. Investigate and mitigate security breaches, ensuring minimal impact on operations.
Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to identify security weaknesses. Implement corrective actions to address vulnerabilities.
Security Policies and Compliance: Develop, implement, and enforce security policies and procedures in compliance with regulatory requirements and industry best practices. Ensure adherence to data protection regulations and gaming industry standards.
Risk Assessment: Perform risk assessments to evaluate the effectiveness of existing security measures. Recommend and implement improvements to mitigate identified risks.
Security Awareness Training: Develop and deliver security awareness training programs for Team Members to promote a culture of security within the organization.
System Hardening: Configure and maintain security systems, including firewalls, intrusion detection/prevention systems (IDS/IPS), and antivirus solutions. Ensure all systems are properly hardened and patched.
Incident Documentation and Reporting: Maintain detailed documentation of security incidents, responses, and resolutions. Prepare regular reports on security activities and incidents for management.
Collaboration and Communication: Work closely with IT team and other departments to ensure security measures are integrated into all aspects of IT infrastructure and operations. Communicate security risks and mitigation strategies to stakeholders.
Continuous Improvement: Stay current with emerging security threats, technologies, and best practices. Continuously evaluate and improve security processes and tools.
Requirements
Education and Experience:
Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field. CompTIA Security+, CISM, CRISC, CISA, GSEC, CISSP, or similar certification and two (2) years of additional full-time cyber security experience may be considered in lieu of education.
Four (4) years of experience in cyber security, including incident response, vulnerability management, and risk assessment.
CompTIA Security+ certification, or willingness to obtain within six (6) months of hire and maintain throughout employment.
Skills and Abilities:
Technical Proficiency: Advanced knowledge of security technologies, including firewalls, IDS/IPS, SIEM, antivirus solutions, and encryption methods.
Analytical Skills: Strong analytical and problem-solving skills to identify and resolve security issues effectively.
Incident Response: Demonstrated ability in handling and responding to security incidents, including conducting forensic analysis and root cause investigations.
Vulnerability Management: Expertise in conducting vulnerability assessments, penetration tests, and implementing remediation strategies.
Regulatory Compliance: Knowledge of regulatory requirements and standards such as PCI-DSS and gaming industry regulations.
Communication Skills: Excellent written and verbal communication skills to document incidents, write reports, and communicate security risks to non-technical stakeholders.
Attention to Detail: Keen attention to detail to ensure accuracy in security monitoring and incident documentation.
Collaboration: Ability to work collaboratively with IT staff and other departments to implement security measures and resolve security issues.
Continuous Learning: Commitment to staying current with emerging security threats, technologies, and best practices through continuous learning and professional development.
Confidentiality: Ability to handle sensitive information with the highest level of confidentiality and integrity.
PREFERRED
Education and Experience:
CISM, CRISC, CISA, GSEC, CISSP, or similar certification
