Associate Security Project Analyst
Description
The Associate Security Project Analyst will work to promote and ensure the security of FirstBank’s and its customers’ data through the rigorous application of tools and skills for the purpose of intrusion/breach prevention, threat hunting, and incident response. Will endeavor to maintain the tactical advantage against adversaries through continuous research, involvement in peer security groups, and the procurement of tools/services to fill gaps that are identified in our security posture.
Essential Duties and Responsibilities:
- Participate in implementation projects
- Coordinate vendor efforts in conjunction with project plans
- Balance multiple projects and multiple tasks while meeting agreed upon objectives
- Maintain documentation on an on-going basis of the security aspects of our network and applications; include documentation updates as an integral part of every project
- Evaluate hardware and software products and network services for potential fit with company’s security requirements
- Assist in the implementation of security policies in equipment and of baseline security policies on various host platforms; test security policies when changed and on a regular, scheduled basis to verify that they are functioning as designed
- Provide input on various design topologies from a security perspective and identify the pros and cons of each approach
- Perform vulnerability assessments of various hosts and networks using appropriate scanning tools
- Monitor various resources, including mailing lists, newsgroups and web sites, for new vulnerabilities and their potential impact on the company’s information systems; take the appropriate action to minimize the impact of these vulnerabilities on affected systems
- Consult on security aspects of software design and make recommendations
- Assist in troubleshooting security-related problems; coordinate resolution with internal technical resources and vendors
- Train other personnel on the company’s security policies and procedures; assist in the development of company-wide security training programs
- Assist in all security-related strategic planning efforts
- Monitor access to FirstBank networks to ensure that security policies in networking equipment and host systems have been implemented correctly and are functioning properly
- Maintain knowledge of current technology and developing technology
- Perform other duties and projects as assigned
- Understand and comply with all provisions of the Safety in the Workplace policy
Minimum Qualifications of Position:
- Typically requires a bachelor’s degree in related field. A combination of post-high school education, job related certification and related experience equivalent to 3 years may be considered in lieu of a degree.
Preferred Qualifications of Position:
- Bachelor’s Degree in Computer Science or other technical field preferred
Knowledge and Skills:
- Strong organizational skills
- Strong technical problem-solving skills
- Ability to talk with individuals and business groups about their needs and ask the right questions related to the security of a product or vendor
- Good understanding of LAN and WAN protocols, including TCP/IP, SNMP, DNS, and SMTP
- Working knowledge of network transmission technologies, including DSS, T1, T3, DSL, and ISDN
- Strong knowledge of application security, and best practices
- Working knowledge of various networking equipment, such as CSU/DSU’s, routers and switches and how this network equipment fits into various network topologies
- Working knowledge of how security is implemented in equipment and on various host platforms; knowledge should include a good understanding of firewalls, packet filtering routers, and the security mechanisms implemented in various operating systems
- Understanding of various security technologies including VPN's, IPSec, strong authentication methodologies, encryption, and digital certificates
- Familiarity with various security tools including syslog analyzers, intrusion detection software, penetration scanning software, and host audit software
- Understanding of malware and how to detect and remediate infections
- Excellent writing skills to communicate information effectively to non-technical and technical stakeholders with the appropriate level of detail
- Good incident response skills
Working Conditions and Physical Requirements:
Work is performed in an office environment with moderate noise levels and light to heavy traffic. An individual in this position:
- Frequently remains stationary throughout a typical business day
- Frequently operates a computer and other office machinery, such as a calculator, copy machine, and computer printer
- Occasionally moves about inside the office to access file cabinets, office machinery, and other rooms
- Occasionally positions self to access drawers and shelves of various heights
- Frequently reaches for and handles paperwork and files
- Constantly communicates with customers, coworkers, and management in-person and on the phone
- Must be able to exchange accurate information
As a Denver Post Top Workplaces award winner nine years in a row (2012-2020), FirstBank provides many great benefits for being a part of our family. From competitive salaries, employer-contributed retirement and health plans, some reduced fee banking services, paid time off, employer paid basic life insurance, short-term and long term disability policies, to holiday parties and more, you will be appreciated and made to feel at home at FirstBank. FirstBank provides a high-paced work environment with different projects landing on your desk routinely. From building the back-end of new products, improving current products and designing internal systems, to managing our security systems, maintaining and improving infrastructure and much more, no week is the same. This is a challenging position that comes with great rewards. #DCE