The Security Analyst will serve as the operational cybersecurity resource responsible for managing day-to-day security activities. The role will focus on incident response, MDR/XDR alert management, vulnerability follow-ups, and ensuring security controls are executed effectively. This individual will work closely with the Senior Security Analyst by implementing and operating the controls and recommendations developed to improve GCI's overall security posture.
- Health Insurance/HMO
- Enjoy unlimited MadMax Coffee
- Diverse learning & growth opportunities
- Accessible Cloud HR platform (Sprout)
- Above standard leaves
- Protect systems and information infrastructure, including firewalls and data encryption programs
- Upgrade systems to enable security software
- Perform penetration testing to uncover vulnerabilities and implement remediation solutions
- Analyze IT requirements and provide objective advice on the use of IT security
- Gather feedback from end-users to continue improving information security
- Monitor computer infrastructure, systems and networks for security issues
- Investigate security breaches and other cybersecurity incidents
- Document security breaches and assess the damage they cause
- Fix detected vulnerabilities to maintain a high-security standard
- Stay current on IT security trends and technology standards. Test and evaluate new technology
- Develop company-wide best practices for IT security
- Research security enhancements and make recommendations to management
- Incident response and security incident management
- 2 to 3 years of proven work experience as an Information Security Analyst or similar role
- Has hands-on experience in executing security activities and IT controls according to established processes, including responding to security incidents and notifications
- Proficient with Microsoft Defender and Sentinel platform
- Working experience in SD-WAN, firewall, proxies, Microsoft 365, and Azure cloud
- Excellent written and oral communication skills
- Experienced with penetration testing and related techniques
- Ability to identify and mitigate infrastructure, systems, and network vulnerabilities
Proven security operations experience
Strong incident response and investigation capabilities
Experience managing security alerts and incidents
Ability to execute and maintain established security controls
Exposure to Microsoft-based environments (Microsoft 365, Active Directory, Entra ID, Azure) is highly preferred
Originally posted on Himalayas