Analyst, Corporate Cybersecurity 1

About Day and Zimmermann

When you’ve been around for more than a century, you know a thing or two! At Day & Zimmermann, we take our lifetime of experience and make things better! Our 37,000+ employees help bring big ideas to life every day. We’re pushing the boundaries of innovation in construction & engineering, operations & maintenance, staffing, and security & defense. And that’s not all. Did we mention that we have 900+ worldwide locations with $3 billion USD in annual revenue? Come join our in on purpose – We put people to work, we protect American freedoms, and we help our customers power and improve the world. We do what we say.® http://www.dayzim.com

Job Summary

We believe great work happens when flexibility and connection come together, and when we respect the whole person, not just the professional. That is why we operate under one flexible work model with a hybrid schedule of three in-office days per week, aligned to one of our three Greater Philadelphia area offices. Your Talent Acquisition partner will work closely with you to confirm the office location that best aligns with the role and your home location, ensuring you have the right balance of connection, collaboration, and flexibility to thrive.

The Analyst, Corporate Cybersecurity I will be an important entry-level member of the cybersecurity team responsible for the execution, development and maintenance of the corporate cybersecurity program. This junior level position will be responsible for following operational procedures and direction to review monitoring systems and address security policy issues. This position will follow procedures to enforce security policies that protect the enterprise's systems and data from access by unauthorized users utilizing the latest cybersecurity technology tools, procedures, and practices.

Responsibilities

• Leverage internally developed and third-party security solutions to monitor the security and availability of enterprise computing environments. Review logs and analyze output from the Security Information and Event Management (SIEM) system and other cybersecurity-owned platforms. Perform daily preventive and remediation maintenance activities. Participate in internal and external audits related to corporate IT systems, security plans, and policies. 40%
• Utilize internally developed and third-party security solutions to identify security gaps and threats within the environment. Enhance security visibility by identifying additional data elements to collect from systems and developing processes to leverage that data effectively. Analyze findings from multiple data sources — including trend analysis, automated scanning, and manual testing — to identify security flaws and misconfigurations. 30%
• Participate in security initiatives — ranging from large-scale projects to targeted tasks — aimed at improving the overall security posture of the organization's computing environment. Collaborate with other IT functional groups and core business units to implement, maintain, and enforce the corporate information security program. 10%
• Serve as a key contributor to incident response planning, testing, investigation, and remediation efforts. Analyze security incidents in a timely manner to determine whether formal response execution and escalation are required, and coordinate with the broader Cybersecurity team throughout the response lifecycle. 10%
• Develop and maintain documentation for operational security policies, processes, and procedures. Create and update standards for data access, protection, and backup to ensure consistent and compliant security practices across the organization. 10%

KSAs (Knowledge, Skills, and Abilities)

• Familiarity with various information technology topics including core Internet and network technologies, i.e., TCP/IP, DNS, DHCP, HTTP/S, SMTP/S, etc. Experience with configuring, administering, and troubleshooting operating systems, including UNIX, Linux, Windows, and iOS. Hands on experience with enterprise Microsoft technologies such as Active Directory, Group Policy, MSSQL, IIS, and Exchange are preferred.
• Good understanding of cybersecurity tools and the sources available to conduct cyber security alerting, analysis, and enhanced situational awareness. Experience with network vulnerability assessments and penetration testing, and cybersecurity evaluation and testing tools. Experience with cyber incident forensics a plus.
• Knowledge of a variety of security protocols and topics to include: SSL/TLS, SSH, hashing and encryption algorithms, PKI, multi-factor authtentication technologies, penetration test tactics and methodologies, scripting and automation with PowerShell, Python and other tools.
• Ability to follow documented procedures, cre