Job Description - Forest River Inc. - Cybersecurity Analyst (On-Site)We are seeking a Cybersecurity Analyst responsible for assisting with the day-to-day operations of securing the company's various information systems. Reporting to the VP of Information Security, the CSA will be tasked with providing technical expertise in all areas of network, systems, and application security. The CSA will work closely with various ITS team members to ensure systems and networks are designed, developed, deployed, and managed with emphasis on strong, effective security and risk management controls. The CSA will lead the vulnerability management program, manage the annual cybersecurity assessments and penetration tests, and research and report on emerging threats, to help the company take proactive risk mitigation steps.
An ideal candidate for this role will utilize proven communication skills, problem-solving abilities, and knowledge of best practices to further enhance our development and analytics capabilities.
- Proactively monitor the environment to detect and implement steps to mitigate cyberattacks before they occur.
- Provides technical expertise regarding security-related concepts to operational teams within the Information Technology Services Department and business.
- Review, investigate, and respond to real-time alerts within the environment.
- Review real-time and historical reports for security and/or compliance violations.
- Monitor online security-related resources for new and emerging cyber threats.
- Assesses new security technologies to determine potential value for the enterprise.
- Conducts vulnerability assessments of firm systems and networks.
- Manage systems owned by the Information Security Team.
Additional Requirements/Qualifications- A 4-year college degree or equivalent industry training and certifications.
- Three to five years of experience in a security analyst or related position.
- Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems.
- Thorough understanding of Microsoft's enterprise technology platform, including Azure, Active Directory, SQL,
- Office365, and the Windows server and desktop operating systems.
- Proficiency with Windows PowerShell.
- Working experience with the following technology vendors and products: Fortinet, Nessus Vulnerability Scanner, Microsoft Defender, or equivalent security management/monitoring tools.
- Strong written skills, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff.
- Working experience with creating, implementing, and managing a threat hunting program within a corporate environment.
- Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO.
- Experience with application and database security preferred
- Be a proficient problem-solver that can work independently
- Dependable transportation - Required (Business-related mileage is reimbursed)
- Smartphone for Dept. communications -- Required
