Security Analyst

General information

Country United States State Georgia City Alpharetta Job ID 41779 Department Information Technology Experience Level MID_SENIOR_LEVEL Employment Status FULL_TIME Workplace Type On-site

Description & Requirements

Infor is seeking an experienced Security Engineer to join the growing vulnerability management team. The team is responsible for monitoring all environments within Infor and collaborating with departments to implement fixes where vulnerabilities or threats are identified.  The primary responsibility is to implement and monitor the effectiveness of the security controls within the Infor Government Solutions (IGS) environment. 
A Day in The Life Typically Includes:

• Using vulnerability scanning tools to identify vulnerabilities in software, firmware, and systems. Your knowledge of modern exploits and exploitation techniques will be used to mainly research the following areas: Microsoft and Linux platforms, Open Systems platforms, Java, Adobe, Web Applications, Java web app virtualization platforms, Cloud concepts (AWS, Azure), Networking, Databases, and others.
• Calling on your demonstratable technical security experience to assess security vulnerabilities (publicly and privately announced) to determine the risk to the environment based on severity and impact to our systems using industry-recognized security risk management methodologies. The audience your work with on a day-to-day basis are very technical, and mainly in the development and operations space.
• Working with department leadership and security leads to design corrective plans, mitigations, and full remediation actions when vulnerabilities have been identified.
• Understand and communicate attack chains to management and other stakeholders.
• Collaborate with infrastructure, application and area leads to test and validate security hot fixes and applied developer provisioned patches.
• Work with the department leadership team to effect change where required and ensure that weaknesses identified within the environment are logged, tracked, and addressed within the service level agreements as part of our contract with the federal government. 
• Communicating and presenting your assessment and recommended remediations to the senior management.
• Support the SOC and cyber incident response team in vulnerability discovery tasks during crisis management.

Basic Qualifications:

• Operational experience with various Vulnerability Scanning tools, vulnerability management scanning and provide detailed rem