Information Security Engineering & Operations Analyst

The JFG Information Security Engineering & Operations Analyst plays a key role in engineering and maintaining JFG InfoSec solutions for protecting, detecting, analyzing, hunting for, and reporting on cybersecurity events related to malware, network intrusion, data loss protection and insider threat incidents. This role is also responsible for finding and reporting on internal and external vulnerabilities on JFG systems. This role will be supported by a Managed Detection & Response (MDR) service. Occasional off-hour and weekend work will be expected. Very little (less than 5%) business travel is expected in this role.

KEY RESPONSIBILITIES

• Build, maintain, and work with IT, to ensure Information Security protective and detective controls are properly configured
• Subject Matter Expert (SME) on Microsoft Security Engineering (AZ-500)
• Work with Managed Detection & Response services and JFG IT to detect, analyze, contain, and remediate threats and vulnerabilities across the JFG environment
• Operate and support enterprise identity and access management, privileged access management, user password vault, email security, web security, host security, cloud security, vulnerability management, data loss protection, cybersecurity monitoring, cybersecurity incident response technologies
• Lead and report on incidents involving insider-threat, internal investigations and litigation support activities
• Incorporate Cyber Threat Intelligence into operational threat and vulnerability management reporting
• Operate and support regular user access reviews to ensure appropriate access
• Support weekly/monthly/quarterly/annual operational metrics, reports and dashboards
• Assist with maintaining the Cybersecurity Incident Response Plan
• Collaborate on the continuous improvement of Information Security Engineering & Operations processes, workflows, and procedures (e.g. RunBooks)
• Automate repetitive tasks and drive efficiencies with measurable benchmarks to show progress
• Depending on the experience of the candidate, technical 'team lead' responsibilities may apply to ensure delivery of InfoSec products and services (this is not a people manager position)

JOB REQUIREMENTS

• EDUCATION, CERTIFICATIONS & EXPERIENCE
• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science preferred
• Types of preferred certifications: Microsoft AZ-500, GIAC-GCIH/GCIA/GCFE/GMON/GPEN, Security+, CEH, SSCP, JFG InfoSec Platforms
• Experience with Python and PowerShell scripting languages for automation.

• DISTINCTION ACROSS LEVELS / EXPERIENCE REQUIRED
• Level II requires 2-5 years' experience. One must possess strong report writing and communication skills. Strong understanding of Information Security controls and frameworks as well as Information Security platforms at JFG. Intermediate understanding of networking concepts and technologies, as well as Windows and Linux environments. Basic understanding of financial services industry. Ability to revise existing processes and standards as needed.
• Level III requires 5-8 years' experience. Expert report writing and communication skills. Can lead and direct the work of others. Strong understanding of Information Security controls and frameworks as well as Information Security platforms at JFG. Must have a strong understanding of networking concepts and technologies, as well as Windows and Linux environments. Solid knowledge of both the cybersecurity and financial services industry. Ability to identify operational capability gaps and establish a roadmap/strategy to address them.
• Level IV requires 8+ years' experience. Expert level report writing and communication skills. Can develop operational dashboards. Strong understanding of Information Security controls and frameworks as well as Information Security platforms at JFG. Must have a strong understanding of networking concepts and technologies, as well as Windows and Linux environments. Can develop instructions and guidelines where needed. Solid knowledge of both the cybersecurity and financial services industry. Ability to identify operational capability gaps and establish a roadmap/strategy to address them

Our culture embraces diversity, equity, & inclusion; one where everyone feels valued and heard. For more information on JFG's culture and diversity efforts, including our employee resource groups, please visit the Diversity section of our career website.