Job Summary:

The Information Security Analyst will join AMA’s Information Security Office (ISO) Security Operations team and report to the Security Operation’s Director. The selected candidate be responsible for technical security controls that safeguard the confidentiality, integrity, and availability of AMA information assets from unauthorized access, loss, alteration, or damage.

Responsibilities:

• Analyzes identified anomalies from extended detection and response (XDR) and Security Information and Event Management (SIEM) systems for severity and potential impact as part of incident response procedures.
• Implements, maintains, and documents security safeguards designed to preserve the integrity, confidentiality, and availability of AMA’s information systems.
• Reviews and assesses current infrastructure changes to ensure appropriate levels of protection.
• Performs network and penetration tests as well as application vulnerability scans.
• Promotes activities to foster information security awareness throughout the AMA.
• Monitors internal control systems to ensure that appropriate information access levels are maintained.
• Supports various projects for AMA's systems development life cycle.

Qualifications:

• Well defined analytical skills to conduct effective security analysis so that key issues are properly identified, and effective solutions are provided.
• Uses analytics to identify endpoint anomalies for incident response actions.
• Competent to explore the specific techniques used by malware to exploit technical vulnerabilities in IT systems/devices and networks, as well as the social engineering techniques to trick IT users into infecting their systems.
• Strong advanced interpersonal skills to adapt personal communication styles to the style of others.
• Advanced time management skills to prioritize workload.
• Able to prioritize and take prompt appropriate actions toward remediation of security events while also seeking and accepting advice from fellow teammates and or subject matter experts where necessary.

Experience Required: Experience 6 years of experience in any two areas:

• Local/wide area network design or support.

• Information security administration.

• Systems Administration.

Education Required: High School diploma and associate degree in information technology, or CompTIA Security+ Certification