Analyst, Security Operations

The role of the Security Operations Analyst is fundamental to the establishment and upkeep of a robust integrated security program. This program is designed to safeguard the integrity, confidentiality, and availability of our information systems assets. The analyst plays a pivotal role in ensuring the resilience of our security infrastructure by performing security administration functions and offering technical support on security-related matters to end-users. Key responsibilities include overseeing and monitoring computing practices across the organization to guarantee the security of individual and departmental access, rights, resources, and sensitive information. By doing so, the Security Operations Analyst acts as a guardian, proactively identifying and addressing potential vulnerabilities to prevent security breaches. In essence, this role is essential for maintaining a secure digital environment where our information assets are shielded from unauthorized access, and the confidentiality and availability of sensitive information are upheld. The analyst's work is integral to fostering a culture of cybersecurity, contributing to the overall resilience and reputation of our organization in the face of evolving cyber threats.

Essential Functions:

• Perform security-monitoring functions on various platform types: network devices, servers, applications, and databases.

• Monitor SIEM (firewalls, servers, and web proxies), IDS/IPS, WAF logs to identify malicious activity and attack patterns and participate in the incident response process when suspicious activity is noted.                                                                     

• Assist in implementation of corporate security policy functions/procedures that align to security mandates/standards that include Sarbanes-Oxley, HIPPA, and PCI compliance.

• Assist in maintaining policy and procedures that are designed to protect designed computer programs, databases and data files from unauthorized or accidental duplication, modification or destruction                                                              

• Configure and monitor security products, which include: anti-virus (A/V), APT, DLP, WAF, web content filtering, IDS/IPS, vulnerability scanners, forensics tools, SIEM, database monitoring, and e-mail content filters.                                                                        

Qualifications:

• Bachelors in IT/IT Security, Computer Science or a related field

• 1-3 years of relevant experience

Knowledge, Skills, and Abilities:

• Experience working with the following solutions: anti-virus, APT detection, data loss protection (DLP), WAF, web content filtering, IDS/IPS, vulnerability scanners, forensics tools, SIEM, DB monitors. 

• Experience working with networking device components (i.e., managed switches, routers, and firewalls).                                         

• Experience managing web content filtering, spam e-mail filtering, and e-mail related incidents.        

• Experience with managing vulnerability scanning (static/dynamic) and penetration testing.                  

• Familiarity with fundamentals in networking/distributed computing environment concepts; ability to configure and/or correlate information in DNS, and understands basic network routing concepts.       

• Broad technical knowledge and experience which includes the following: TCP/IP, Active Directory, Microsoft Windows platforms (desktop/server), Open System platforms (desktop/servers), database platforms (SQL/Oracle)                                                                         

• Programming and/or scripting experience preferred (e.g., Perl, Batch, or C)                                        

• Service-oriented and must work easily with end users, IT administrators, and management.

Physical Demands: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

Travel: No or very little travel likely

Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

This position is classified as “in-office.” As an in-office role, it requires employees to work from a designated Carnival office in South