IT Security Analyst

MHI Shared Services Americas, Inc. (MSSA) is looking for an IT Security Analyst to join our team. This is a hybrid role based out of our Houston Office.

SUMMARY

Our organization is dedicated to securing a variety of businesses, and we are seeking a passionate, intelligent, curious, and diligent professional to join our security team. Our team collaborates with leadership and IT teams, and your integrity, good judgment, and competency will reflect our organizational goals. If you are excited about security operations, vulnerability assessments, cyber hygiene, or incident response, then this role is for you.

The ideal candidate will hold one of the following certifications: GCIH, GSEC, Security+, or similar industry certifications and 5 years of IT experience with at least 2 years in information security. In this role, you will serve in a Tier 2 role in the internal Security Operations Center. We will expect you to be familiar with email-based and network-based attacks. You should have experience with the tools of the trade, and have some experience working with IT infrastructure, servers, endpoints, or networks. If you have worked with Azure or Office 365, that is a plus.

ESSENTIAL DUTIES & RESPONSIBILITIES

• Actively participates in the daily coordination and remediation of all security incidents in the organization.
• Oversees the monitoring, investigating, and reporting of security related events.
• Serves as the escalation point for Tier 1 analysts.
• Trains and mentors junior members of the team.
• Responds to high priority security incidents.
• Coordinates response activities with the external SOC team.
• Learns attacker tactics, techniques, and procedures.
• Educates company staff on better security protocols.
• Follows the Security Incident Management Response Policy in responding to security incidents.
• Provides quick updates of security incidents to the security operations manager.
• Recommends specific measures that can improve the company’s overall security posture through the application of findings from investigation of security incidents.
• Responsible for the compilation and analysis of data for proper reporting and metrics.
• Supports security operations, including identity management, endpoint security, email security, web security, and network security.
• Provides timely, clear, and complete communication and documentation.

KNOWLEDGE, SKILLS & EDUCATION

• Education: Computer Science, Information Systems or related field or equivalent work experience. At least 5 years of experience in IT; 2 years in information security.
• Technical Knowledge:
  • Experience with common scripting languages (PowerShell, python) and using them for automation
  • Familiarity or experience with one or more of the following: recon, exploitation, post-exploit activities, evasion techniques (AV, IDS, etc.), ATT&CK, IR, or forensics.
  • Knowledge of OSI layers.
  • Knowledge of phishing, OSINT, and social engineering
  • Experience with Active Directory, GPO, Windows (architecture, standards, networking, and firewalls), and networks.
  • Experience with log management and SIEM. 
  • Experience with Azure and Office 365 is highly desired.

Other Skills:

• Ability to review and validate findings of tools and third parties.
• Continuous pursuit of professional development opportunities, including external and internal training, professional association memberships, community involvement, and internal information sharing/cross-training.
• Able to identify, prioritize, and respond to risks based on standards, good judgement, and organizational priorities and requirements.
• Approaches problems from multiple angles to uncover previously hidden evidence and insights.

Why Should You Apply?

• Excellent Benefits (Medical, Dental, Vision & 401K Matching)
• Excellent growth and advancement opportunities
• Tuition reimbursement and on-the-job training
• Paid vacation, sick time and holidays
• Committed to quality product and services
• Great working environment and culture
• Employee Appreciation Programs and Events

MHI Shared Services Americas an Equal Employment Opportunity (EEO) employer actively seeking to diversify the workforce and is committed to a policy of equal employment opportunity. Therefore, all qualified applicants regardless of race, color, religion, gender, sexual orientation, gender identity, national origin, disability, veteran status or any other legally recognized protected basis under applicable law, are strongly encouraged to apply.

#LI-Hybrid