What are the responsibilities and job description for the Security Analyst position at JE Dunn?
Best People Right Culture. These are the driving forces behind JE Dunn’s success.
By hiring inspired people, giving them interesting and challenging work, enabling them with innovative tools, and letting them share in the company’s rewards, we’ve found a sustainable way to grow in our industry for the last 90 years.
Our diverse teams around the country strive to enrich lives through inspired people and places every day, and we need inspired people like you to join us in our pursuit of building perfection.
Role Summary
The Security Analyst will monitor and maintain various security systems. This position will be responsible for security operations monitoring and remediation. This position will analyze and trouble shoot issues, conduct initial response, and be proactive to minimize future security threat activities. All activities will be performed in support of the strategy, vision and values of JE Dunn.
- Autonomy & Decision-Making: Makes decisions on routine matters, provides recommendations to supervisor and refers all exceptions to supervisor.
- Career Path: Security Engineer
Key Role Responsibilities - Core
- May analyze security logs to identify threat events; triage and respond accordingly to security incidents following internal security protocols.
- Configures security controls in multiple protection systems and IT or OT infrastructure in accordance with policy, standards, and procedures.
- Tests network security controls; coordinating remediation efforts and closure of any identified issues.
- Works with various internal teams to test, discover and resolve vulnerabilities.
- May act as first line of support for triage and remediation of support tickets related to security and tracks ongoing support issues.
- Stays current with IT security trends and standards through local special interest group involvement and monitoring online information sources.
- Responsible for asset management of enterprise security inventory, excluding end user devices.
- Facilitates administrator and end-user IT security training.
- Manages questionnaires related to third-party vendor security management.
- Stays current with released security features of internal IT and commercial systems and software.
- Maintains confidentiality and integrity in dealing with sensitive information systems and processes.
- Works directly with clients, partners, and project teams to develop requirements for new secure system configuration, perform research and development activities, and assist in turnover processes.
- Provides subject matter expertise and supports solution implementation of OT infrastructure. Trains operations teams to ensure a high-level understanding of security solutions, practices, controls, and guidelines.
- Provides security recommendations on service design, product set-up and policies.
- Supports proof of concepts for new technologies and solutions.
- Applies industry standard methodologies and frameworks.
- Researches, develops, and operationalizes OT defensive tactics for detecting and responding to threats.
- Operationalizes sensors and analytics solutions to enable productive OT security operations, investigation, and analysis.
- Analyzes component capability, criticality, availability, and adversary capability to inform design of OT resilient architectures.
- Leverages ATT&CK for ICS to build detection capability and OT environment investigation.
- Understands and assesses security policies, standards, propose hardening guidelines for IT and OT networks.
- Assesses protection level of the networks, infrastructure and Industrial Control Systems and the compliance of these assets towards client policies, industry standards and government regulation.
- Understands, researches, designs and develops secure implementations of operational technology solutions, and oversee large rollouts of the same.
Key Role Responsibilities - Additional Core
N/A
Knowledge, Skills & Abilities
- Ability to perform work accurately and completely, and in a timely manner
- Communication skills, verbal and written – Intermediate
- Strong self-motivation; willing to learn and research skill set in line with business objectives
- Ability to utilize internet resources for research and problem solving – Advanced
- Knowledge of industrial systems and operational technologies
- Knowledge of NIST SP 800-82, CISA ICS guidance
- Proficiency in Operational Technology (OT) architecture
- Ability to follow-up on inquiries in a timely manner
- Ability to solve technical issues – Intermediate
- Adapts to change, is open to new ideas, takes on new responsibilities, handles pressure and adjusts plans to meet changing needs
- Manages difficult or emotional customer situations promptly and efficiently
- Listening skills
- Organizational skills
- Ability to quickly and effectively solve complex problems
- Ability to deliver quality through attention to detail
- Ability to work in team and independently
- Ability to work a flexible schedule – might be on call in the evenings and weekends
- Ability to build relationships with team members that transcend a project
Education
- Bachelor’s degree in information security or related field (Preferred)
- In lieu of the above requirements, equivalent relevant experience will be considered.
Experience
- 2 years information security or ICS/OT security experience (Preferred)
Working Environment
- Must be able to lift up to 50 pounds
- May require periods of overnight travel
- Normal office environment
- Frequent activity: Sitting, Viewing Computer Screen
- Occasional activity: Standing, Walking, Bending, Climbing, Reaching above Shoulder, Pushing, Pulling
JE Dunn Construction is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and it is our policy to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. JE Dunn Construction is a background screening, drug-free workplace.
JE Dunn provides reasonable accommodations to qualified individuals with disabilities. If you would like to request a reasonable accommodation in order to apply for a job, please submit your request to accommodations@jedunn.com
JE Dunn Construction Company does not accept unsolicited resumes from search firms or agencies. Any resume submitted to any employee of JE Dunn Construction without a prior written search agreement will be considered unsolicited and the property of JE Dunn Construction Company. Please, no phone calls or emails.