Systems/Application Security Analyst, Sr. jobs in Reading, PA

Job Summary

Protect systems and data from theft, misuse, breach, and compromise to ensure systems functionality and data remain available and secure.  Assist in security incident investigation including incident response and forensics, detecting and responding to threats and compromises.  Responsible for Cybersecurity tasks to protect and defend information and information systems, compliance and monitoring of systems and/or applications, and vulnerability management.  Provide guidance for configuring and validating security appliances such as firewalls, e-mail filters, proxies, and anti-malware tools.

Duties and Responsibilities

• Manage and administer cyber security technology, such as: Varonis, Proofpoint, Vulnerability scanners (Rapid7) web content filters/proxies, email security, IDS/IPS, SIEM, DNS security, data loss prevention, and End-point protection (CrowdStrike) software.  Assist with the configuration and monitoring of cyber security appliances. 
• Lead research, review, and management of cybersecurity events.  Assist with planning and management of response to cybersecurity incidents and remediation.
• Collaborate in the development and execution of policies and procedures to ensure information system reliability and accessibility.  Assist with developing new security mitigation, monitoring procedures, and strategies.
• Participate in ongoing cyber security training to promote security awareness and improve operational efficiency.  Perform internal phishing campaigns.  Train new personnel, ensuring that they are familiar with policy, procedures, standards, and cyber security tools. 
• Perform security assessments and assist with internal penetration tests to reduce cybersecurity risk.  Recommend new security tools to management and provide guidance and expertise in their implementation.  Mentor IT and Cyber Security staff and assist with establishment of best practices.    
• Perform other duties as requested.

Knowledge, Skills and Abilities

• Experience administering security technologies, such as Varonis, Proofpoint, CrowdStrike, QRadar, LogRythmn, and MicroSoft Enterprise Mobility Security.  
• Ability to mentor, train, and effectively transfer knowledge to other cyber security analysts and IT staff.
• Understanding of Information Security concepts, policies, and procedures.
• Excellent problem-solving techniques and listening skills.
• Experience implementing NIST and ISO Industry Standards.
• Experience handling security incident response.

Education and Experience

• Bachelor’s degree in a computer science or related field preferred.
• Three (3) or more years of Cyber Security Analysis experience.
• ITIL Foundation certification (at hire or within 12 months in position).
• Preferred: CISSP or Security IT security certifications.