Senior Cybersecurity Analyst|
This position is for a Senior Cybersecurity Analyst in the Attack Surface Management team supporting Security Configuration Management (SCM). The SCM team is responsible for maintaining automated requirements checks to ensure technologies have the specified security configurations in place.
This includes -
· Creating and maintaining various scripts and policies required to perform security configuration management compliance across the enterprise
· Integrating and transforming collected data into a user-consumable output format
· Coordinating with Cybersecurity, Development and Support teams on updates and changes to technical security requirement documents
· Working with platform owners to test script outputs.
· Assume responsibility for the development and maintenance of configuration checks for several technologies
· Develop custom script-based configuration checks to validate security configuration requirements are met
· Setup configuration checks using a Third Party Compliance/Vulnerability management tool
· Provide technical feedback in the development of technology configuration requirements
· Provide guidance to infrastructure support teams for remediation of configurations out of compliance
· Support application development teams on security configuration implementation
· Assist in troubleshooting to remediate configurations out of compliance
· Review and validate the asset discovery methods for a technology are properly functioning
· Ensure quality check results are properly captured and documented in the system of record
· Support other security configuration team members with other technologies
· Conduct Root Cause Analysis for underlying issues with technology configurations.
Flex Work Arrangement - Hybrid Position - This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office two days a week, Tuesdays and Wednesdays with a general guidepost of being in the office 50% of the time based on business needs.