Cyber Security Analyst

Monitor, protect, and improve the Cooperative’s enterprise security posture through continuous detection, hardening, and vulnerability management.

Responsibilities

• Develop, implement, and maintain security documentation including policies, standards, guidelines, and procedures
• Develop, document, and verify security baseline configurations on Cooperative-owned assets
• Lead and enhance cyber safety training to build a culture of security awareness
• Maintain and manage the Security Information and Event Monitoring solution to monitor server logs, firewall logs, and network traffic for unusual or suspicious activity
• Administer and maintain the antivirus/endpoint detection and response solution
• Monitor IPS/IDS for anomalous traffic patterns
• Conduct risk assessments and testing of enterprise technology infrastructure
• Perform vulnerability scanning and recommend actions to mitigate identified vulnerabilities
• Assess enterprise business requirements and provide objective advice on security solutions
• Maintain, update, and mitigate vulnerabilities within the risk registry
• Facilitate penetration testing and follow through on all mitigating actions
• Implement security improvements by assessing current conditions and evaluating trends
• Create, maintain, and disseminate system documentation and Standard Operating Procedures for network and other duties
• Coordinate with employees to support an enterprise approach to security
• Work with third parties accessing enterprise infrastructure to promote awareness and reduce risk
• Stay current on latest attack techniques and propose appropriate countermeasures
• Assist with special projects as necessary

Requirements

• Bachelor’s degree in Cybersecurity or other related IT field, or equivalent related experience and/or training
• Certified Ethical Hacker certification is preferred
• Previous experience with a Security Information and Event Monitoring solution and reviewing Windows logs
• Ability to maintain professionalism and control under all circumstances
• Valid driver’s license and acceptable driving record; able to operate SVEC vehicles
• Must become and remain certified in CPR and first aid; skilled in use of all safety equipment
• Proficiency in Microsoft Office including Excel and Word
• Strong verbal, written, analytical, and interpersonal skills
• Ability to dissect and resolve complex problems quickly and systematically
• Organized with keen attention to detail and efficient work habits
• Ability to research IT security issues and products as required
• Analytical and logical thinking, with ability to assemble facts clearly
• Team-oriented and able to work collaboratively
• Maintain high-level confidentiality regarding associate, member-owner, and corporate information
• Effective techniques to research and access sources needed to fulfill responsibilities
• Access to reliable transportation to and from work

Technologies

• Security Information and Event Monitoring
• Antivirus/endpoint detection and response
• IPS/IDS
• Windows logs
• Microsoft Office, Excel, Word

Benefits

• 401(k)
• Dental insurance
• Employee assistance program
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Relocation assistance
• Retirement plan
• Vision insurance
• Profit sharing

Reporting

• Reports to: Director of Security and Enterprise Infrastructure
• Directs: None

Physical Requirements

• Participation in SVEC job safety and training programs, including workshops, seminars, and SVEC-sponsored courses and events
• Must be able to use office equipment including telephone, computer, and other systems and related software
• Must be able and available to work weekends, holidays, evenings, and other times outside normal duty hours to assist with service restoration and emergencies as needed
• Must maintain an operating telephone or personal communication device at residence and provide SVEC with ability to contact the manager for routine and/or emergency business
• Primarily inside work; must be able to work up to eight hours per day at a computer
• Some lifting required; able to lift objects unassisted up to 30 pounds
• Some standing, walking, climbing, balancing, stooping, kneeling, crouching, or crawling at a minimal degree

Job Details

• Location: Harrisonburg, VA (onsite)
• Job type: Full-time
• Work location: In person
• Ability to relocate: Harrisonburg, VA 22801 (Relocate before starting work)

Compensation

• Pay range: USD 75,439 - 100,900 per yearly
• Pay range detail: $75,439.26 - $100,900.02 annually
• Actual compensation within range based on applicant experience, education, and relevant certifications
• Compensation package: Profit sharing