Sr. Info. Security Analyst

The Sr. Information Security Analyst supports the organization’s overall Information Security, including Cybersecurity posture and culture. The role requires strong technical and interpersonal skills to effectively analyze information systems, research and validate alerts, and operate security tools for monitoring the MTS environment.

Requirements

• Evaluate/assess Application Security Architecture and suggest recommendations
• Prepare Threat Models for Application security and recommend mitigations
• Support the administration of local and vendor-managed security solutions for the MTS environment
• Analyze security threats, vulnerability assessments, and audit results to recommend security solutions that enable business objectives
• Work with Application Engineering teams to ensure public access applications are designed and implemented with necessary security controls
• Conduct Dynamic Application Security Testing
• Review findings and engage Application Engineering teams for remediation
• Provide security information assurance subject matter expertise support throughout the SDLC
• Review and improve Access Management & Controls
• Collaborate with other teams to support response efforts to security-related findings or concerns
• Report on incident response metrics and provide assessment reports
• Continuously improve the organization’s security stance and framework
• Help to develop and maintain Security Best Practices manual/portal
• Assist with the organization’s security awareness training program
• Recommend and participate in the design and implementation of policies, procedures, standards, tools, and methodologies
• Work with Security Operations Center to analyze and respond to alerts from automated logging, monitoring tools