Information Security Analyst

Description

Mechanical Dynamics & Analysis LLC (MD&A), one of the largest independent turbine repair organizations in the U.S., is seeking a self-motivated and talented individual to fill the role of Information Security (Infosec) Analyst.  The position is located in our Latham, NY Headquarters.

The Infosec Analyst will be responsible for maintaining awareness of, and performing initial response to, digital threats to the organization.  Reporting to the IT Infrastructure and Security Manager, the Infosec Analyst will utilize a variety of tools to monitor all MD&A systems.  This role will serve as a first escalation point for security incidents and works closely with the service desk, infrastructure, and enterprise applications teams.

This complex environment includes enterprise storage and backup technologies, Microsoft and Linux server architectures; virtualization technology for servers and desktops; datacenter and campus networking; enterprise messaging, collaboration, and Mobile Device Management systems distributed across multiple data centers.

• The Infosec Analyst will have the following responsibilities:
• Read and interpret security related log data
• Triage security alerts and incidents, escalating as necessary
•  Track and generate reports of security related metrics
• Perform day-to-day administration of the Microsoft Sentinel SIEM and Defender environments
•  Conduct vulnerability scans of company networks and systems
•  Develop remediation plans for discovered vulnerabilities and facilitate their execution
• Maintain a strong understanding of security frameworks such as NIST and ISO 27001.
•  Assist with audits of networks and systems to ensure compliance with policies and standards
•  Assist with development of internal policies and procedures
•  Administer cybersecurity training platform (KnowBe4)
• Ensure proper functionality of physical security devices such as electronic door locks and cameras.
•  Perform day-to-day administration of Governance, Risk Management, and Compliance (GRC) management system
• Implement new security-focused technologies under direction of the Information Security Manager
• Utilize command line environments such as PowerShell and Python to automate tasks and procedures
• Assist with annual penetration testing exercises
• Assist other IT teams with projects as needed

Additional Considerations:

•  After-hours work will be required, where appropriate, in the course of responding to incidents or assisting other IT teams with projects
•  Occasional travel will be required to various manufacturing facilities throughout the US

Requirements

Minimum Qualifications:

· 2-5 years’ experience in an infosec analyst or similar role

· Demonstrated continued professional growth and development

· Excellent written and oral communication skills

· PowerShell experience strongly preferred

· Must be able to meet the physical demands of the position

Preferred Qualifications:

· Bachelor’s degree in information security, related field, or equivalent experience

· Security related certifications (Security+, SSCP, CCSP or similar)

· Demonstrated experience automating repetitive tasks with scripting.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Visual acuity sufficient to work at a computer screen frequently and throughout the day, near and far visual acuity, depth perception, color vision sufficient to recognize people, words, and numbers.
• Frequent standing and walking, and occasional bending, stooping, kneeling.
• Occasional navigating and/or crawling in confined spaces in buildings.
• Lifting to twenty-five (25) pounds frequently, fifty (50) pounds on an occasional basis, and in excess of fifty (50) pounds with assistance. The heavy objects to be lifted include rackmount server equipment, printers, and related equipment. 
• Body Twisting and turning during equipment installs.
• Speaking and hearing ability sufficient to hear over phone and carry-on routine conversations.
• Legally drive an automobile and transport equipment.
• Sit for extended periods in a typing position.
• Hand-eye-arm and finger dexterity to use a personal computer keyboard and other common office equipment for long periods of time.

Our Culture: A Powerful Purpose

At MD&A, we truly work together, as one team! We collaborate, we listen, we innovate. We put energy behind everything we do! Explore A Career with a Powerful purpose!