Information Security Analyst
Purpose of the role
As we continue to grow, we are looking for an Information Security Analyst to join our Information Security team. Reporting to the Information Security Specialist, you will be responsible for day-to-day operational tasks required to enable the protection of Frontier’s people, data and information systems, from an ever evolving cyber threat landscape.
Responsibilities
- Day-to-day monitoring and maintenance of security controls
- Detect and respond to security events, alerts, phishing reports and service tickets
- Work with the IT team to ensure patch levels are maintained
- Conduct or coordinate remedial activities following security assessments, vulnerability scanning, vendor advisories and audits to remediate risk
- Build, run and report on security awareness training campaigns and communications
- Conduct system compliance audits to ensure processes are being carried out appropriately
- Assist in defining, documenting and refining our incident response plan, playbooks, standard operating procedures, processes and policies
About you
- Previous experience in Information Security or related security experience (IT, network, infrastructure, application support)
- Industry related certification is desirable (e.g. CompTIA, ISC2, ISACA, Microsoft)
- Ideally you will have knowledge of some of the following areas:
- Awareness of security testing, analysis and DFIR tools
- Good communication skills, and able to articulate technical knowledge to non-technical audience
- Problem solver with the ability to think outside of the box
- Awareness of security frameworks such as NIST, CIS, ISO27001 or Mitre ATT&CK
- Keen interest in cyber security and active within the cybersecurity community
o endpoint protection
o endpoint detection and response (EDR)
o log management and SIEM
o next generation firewalls (NGFW)
o intrusion detection and prevention systems (IDS/IPS)
o cloud and SaaS technologies (AWS/Azure/O365)
o email security gateway
o privileged access management/endpoint privileged management (PAM/EPM)
o Windows domain services (AD, DHCP, DNS)
o Networking (routing, switches)