Information Security Analyst I or II

DMBA provides a variety of benefits including health, life, and retirement to employees of the Church of Jesus Christ of Latter-day Saints and its affiliates. DMBA began operations in 1970 and is now in its 54th year of supporting the Church of Jesus Christ of Latter-day Saints and its mission.

Position Summary:

DMBA is looking for a SOC Analyst to join our Information Security Team. This technical role will support: vulnerability management, logging, monitoring, and incident response. This is a hands-on role with an opportunity to enhance and improve our enterprise security program.

Responsibilities:

• Leverage a wide range of security technologies to help identify, track, and respond to threats
• Maintain, improve and implement processes, procedures and tooling to advance security goals
• Establish a baseline of normal activity and alert on anything outside of that baseline
• Participate in Threat Hunting and Purple Team activities performed by the SOC
• Investigate, triage, and escalate security alerts and participate in Incident response
• Research and prioritize known vulnerability findings
• Help address security items escalated to the Security Team from internal and external sources
• Be an active participant in identifying weaknesses and providing options for resolution.

Qualifications and Experience:

• Understanding of information security best practices or a strong desire to learn
• Working knowledge of log management/aggregation best practices
• Knowledge of databases, Windows, Linux, and networking
• Experience with security tooling (Firewall, WAF, Vulnerability Scanning, XDR, SIEM etc.)
• Fundamental understanding and cloud security (Azure, AWS, GCP)
• Creation and management of SOC dashboards and Reports
• Home Lab Experience, TryHackMe, Hack the Box, etc.
• Strong communication skills to collaborate with IT and business teams
• Ability to work independently on various tasks
• Highly motivated team player with a strong desire to learn in the Cybersecurity sector

Other Qualifications ("Nice to Have"):

• Usable understanding of PowerShell or other scripting languages
• Understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls, etc.)
• Certifications: GSEC, GCIH, GCDA, Security +, CYSA or ISC2 CC
• Experience with some security tools: Splunk, SumoLogic, ELK, Carbon Black, CrowdStrike, Wazuh, Palo Alto, Cisco, Wiz, Darktrace, Recorded Future, MS Defender, MimeCast, ProofPoint

What We Offer:

• Competitive pay
• Rich medical, vision and dental benefits with low premiums. One of the top health plans in Utah
• Rich retirement planning: including 401(k) company match, 8% EDRC Employer Discretionary Retirement Contribution (we just give you free money for retirement), life insurance, and full-service Financial Planners onsite at no cost
• Generous paid leave plan that starts accruing your first day, your birthday off, additional sick leave and 12 paid holidays
• World class wellness program with health coaching, ability to earn 3 additional days off a year, fun activities, and an onsite gym.
• Tuition reimbursement
• Career development through company sponsored programs and over 5000 on-demand online training courses.
• Hybrid work schedules available depending on position.
• Employee Assistance Program