Analyst, Digital Security

As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or veteran status.

WM, a Fortune 250 company, is the leading provider of comprehensive waste and environmental services in North America. We are strongly committed to a foundation of operating excellence, professionalism and financial strength. WM serves nearly 25 million customers in residential, commercial, industrial and municipal markets throughout North America through a network of collection operations, transfer stations, landfills, recycling facilities and waste-based energy production projects.

I. Job Summary
Under general supervision, the Cybersecurity Engineer works as part of a team to achieve cybersecurity goals across the organization.  The Cybersecurity Engineer will be required to effectively translate business objectives and risk management strategies into specific security technologies and services and will serve as an enterprise-wide resource for those technologies.

II. Duties and Responsibilities include the following: 
To perform this job successfully, an individual must be able to perform each duty satisfactorily. Other ancillary duties may be assigned. 
 

• Serve as a critical resource for one or more critical cybersecurity technologies, possessing a substantial level of knowledge in the design, deployment, maintenance and remediation of those technologies
• Drives improvements and upgrades within the information protection technical toolset, focusing on one or more of data protection and DLP technology, endpoint protection, cloud security, O365 Security, firewall, threat intel and vulnerability management.
• Coordinate with Cybersecurity leadership and business owners to determine business needs and requirements
• Track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in security standards and operational processes
• As part of a team, validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Participate in the review of security technologies, tools and services, and make recommendations to the broader security team for their use, based on security, financial and operational metrics
• Leverages automation to achieve results at scale for team functions
• Designs methods of reducing manual labor through the use of automated mechanisms in the platforms
• Liaise with other security practitioners to share best practices and insights 

III. Supervisory Responsibilities
 

• None required.

IV. Qualifications

A. Education and Experience
 

• Required: Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study. Three (3) years of previous experience required. An additional four (4) years of related experience may substitute for the Bachelor's degree.
• Preferred: Bachelor's Degree and at least three (3) years of experience in network, host, data and/or application security in multiple operating system environments.

B. Certificates, Licenses, Registrations or Other Requirements
 

• None required.
• Preferred: Other professional certifications desired include: CWSP, CISA, GIAC
• Other vendor certifications desired include: CCNA, CCNP, CCSP, MSCE

C. Other Knowledge, Skills or Abilities Required

Intermediate knowledge or skills in one or more of the following is required:
 

• Knowledge of threat and vulnerability and/or identity related processes and technology.
• Proficiency in vulnerability management tools such as Qualys, Core Impact, WebInspect, etc.
• Experience with incident detection, incident response, and forensics.
• O365 Security.  

D. Other Knowledge, Skills or Abilities that Contribute to Success

May require intermediate skills in one or more of the following:
 

• Fortune 500 experience.
• Technical skills across a broad range of computing platforms and network protocols.
• Experience in several or more of the following technologies: Firewalls, Intrusion Prevention, Vulnerability Scanning, Data Loss Prevention, Email Security, Endpoint Security, DNS, Web Content Filtering, SEIM, AV, Certificate Authority and encryption.