Information Security Analyst III

The Information Security Analyst III is responsible for day-to-day monitoring and operational procedures that help safeguard information systems assets. This role supports confidentiality, availability, and integrity through security reviews, documentation, policy and process assistance, and direct engagement with users to implement appropriate security measures.

Onsite Location

Tustin, CA (onsite)

Compensation

USD 53 - 86 per hourly

Key Responsibilities

• Perform procedures that protect information systems assets and defend against intentional or inadvertent access or destruction.
• Support security awareness by ensuring team members understand and follow required procedures.
• Carry out daily operations and monitor events across multiple sources, including SIEM consoles, network and host-based intrusion detection systems, firewall consoles, Unix and Windows system logs, applications, databases, and other security monitoring tools.
• Participate in knowledge sharing with other analysts and contribute technical articles to the internal Knowledgebase.
• Create, maintain, and update documentation for procedures and process improvement.
• Interface with users to identify security needs and implement procedures that align with security and business initiatives.
• Evaluate the level of security required when requests come from other team members, ensuring appropriate measures are in place to protect confidentiality, availability, and integrity.
• Assess business needs alongside security concerns, recommend solutions that support business objectives, and communicate issues to management.
• Assist with the development, implementation, and periodic review of security policies, procedures, and metrics to support industry best practices and standards.
• Conduct security assessments and reviews of local area networking initiatives for security compliance.
• Ensure that system resource configurations, software, applications, processes, or guidelines comply with Information Security requirements, policies, and standards.
• Assist in planning, organizing, and implementing Information Security-related projects.
• Perform other duties as assigned.

Required Qualifications

• High School Diploma or GED required
• Bachelor’s Degree in a related field or equivalent years of experience required
• 5-7 years of prior relevant experience required

Preferred Qualifications

• CISSP, SANS GIAC, or equivalent

Relevant Skills and Knowledge

• Familiarity with domain structures, user authentication, and digital signatures may be required.
• Ability to accurately evaluate the appropriate level of security for requested activities.
• Understanding of firewall theory and other security system configurations.
• In-depth knowledge of intrusion detection and Internet architecture.
• Capability to weigh business needs against security concerns and articulate issues to management.

Tools and Technologies

• SIEM consoles
• Network intrusion detection systems
• Host based intrusion detection systems
• Firewall consoles
• System logs (Unix and Windows)
• Applications
• Databases
• Knowledgebase

Compliance and Training

The position requires compliance with regulatory requirements and assigned training requirements, including BSA regulations corresponding to specific job duties. Failure to comply may lead to disciplinary and other employment-related actions.