Cyber Security Analyst

The Cyber Security Analyst is responsible for providing technical assistance to ensure Heartland's company systems, network, and infrastructure are protected from the ever-evolving cyber security threats. They will identify, analyze, and assist in remediation of security risks. Provide appropriate Tier II support, escalation, and resolution to cyber security problems when necessary.

• Monitor cloud platforms security, fine tune security dashboards and alerts, and perform threat hunting and incident investigation from the data in the logs.
• Respond to security incidents and analyze alerts, logs, and threat cases. Exercise good judgement when dealing with issues and ensure a sense of urgency in their resolution while remaining calm and focused while ensuring that no details are missed. Support technical forensic investigations.
• Engage with various departments and functions within the business as needed to improve knowledge of cyber security and best business practices in the cyber security area.
• Implement and enforcement of security policies, procedures and work plans based on industry best practices.
• Assist manager in fine tuning Windows servers and desktop policies, and hardening of network firewall, switches, desktops, and servers.
• Run vulnerability scans for IT/OT networks and create reports for remediation.
• Submit security reports at the agreed intervals to leadership.
• Stay current on tools and technologies to protect, identify, and respond to security incidents. Research and evaluate new cybersecurity threats, IT trends and security controls.

• Bachelor's degree in computer engineering, Computer Science, or a related field and a minimum of one year of work experience required, or a minimum of five years of progressive job experience including people, project, or account management with leadership and influencing skills required. If applicable, certification preferred.
• IT security related certifications such as Security+, CISM, CISSP, CEH, CCIE, CCNP etc. preferred.
• Experience required in identity and access management, firewall architecture and integration, cyber threat hunting, research and mitigation, vulnerability assessment and pen testing, employee training and education.
• Hands-on experience with vulnerability scans and remediation is required.
• Required strong knowledge of firewall, EDR, antivirus, IDS/IPS, DLP, MFA, Nessus, and other network security tools.
• Required knowledge of:
  
  
  
  • MS Azure cloud suite, Microsoft 365 security and familiarity with SAP ERP security system
  • Active directory security policies, DNS, DHCP and TCP/IP protocols
  • NIST, ISO 27001, COBIT, ITIL Cybersecurity Framework
  
  
  
  
• Preferred knowledge of working with Cisco ASA, Fortinet, Palo Alto, or other next generation firewalls
• Strong written and verbal communication skills.
• Strong analytical and problem-solving skills.