Security Analyst (Compliance)

Top Skills:

• ** Compliance knowledge and background;
• ** Vulnerability scanners;
• ** Microsoft Excel – VLOOKUP, pivot tables;
• ** Security Admin knowledge
• ** Driver who works well independently and able to work collaboratively with other teams and technical experts;
• ** Ability to identify and solve problems, able to organize meetings, and translate discussed decisions into actions
• ** Self-directing with sense of ownership.

Job Description:

• Supports the configuration compliance baseline program which scans for deviations from prescribed settings in technologies such as operating systems, middleware components, databases, and network appliances.
• Updates existing baseline documents annually or creates new baseline documents as required. Ensures baselines effectively secure key technologies by starting with CIS benchmarks and with subject matter experts to refine baselines.
• Configures scans within the scanning tool to match the approved baseline document. Ensures these scans run regularly and distributes the results to the technology personnel who will resolve deviations. Works with technology support partners and the scanning vendor to resolve any problems with the scanning tool.
• Reports on compliance adherence and spearheads governance efforts to ensure the technology personnel resolve the deviations on time, showing follow-up and escalation.

Mandatory Skills

• Solid working experience and knowledge of Unix operating systems, Windows OS and services to include domains/active directory/GPOs
• Understanding of databases, web technologies, and network devices Experience with vulnerability and/or configuration compliance scanners
• Strong verbal and written communications skills
• Intermediate competency with spreadsheets
• Intermediate competency writing scripts using python
• Able to write documentation
• Ability to identify and solve problems
• Able to organize meetings, and translate discussed decisions into actions Self-directing with sense of ownership

Desired Skills

• Ability to design and document processes
• Ability to teach others their area or responsibility