Senior Cybersecurity Analyst, Vestwell

• You should have a sound working knowledge of cybersecurity, including intrusion prevention and incident response
• You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills
• Professional experience in computer science, programming, or related field
• Professional experience working in computer systems with some specialization in computer security
• The ability to manage competing deadlines
• Excellent verbal and written communication skills, interpersonal, and teaching skills
• Ability to anticipate, analyze, and problem-solve
• The ability to remain current on the latest technology and best practices in information security
• Proficient, or able to gain proficiency with, a broad array of security software applications and tools
• Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication
• Experienced with penetration testing and techniques
• Understand patch management

Desirable

• The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization
• The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur
• You will work inter-departmentally to identify and correct any flaws in our security systems
• Manage all day-to-day activities within the Security organization
• Management of Anti-Virus and Anti-Malware solutions like CrowdStrike
• Monitoring and alerting management
• Confirm infrastructure has most recent patches, updates and libraries
• Management of 1Password
• Management of vaults and user access for both passwords and keys
• Management of KnowBe4
• Phishing tests and training and response
• Develop ongoing security posture improvements
• Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected
• Management of Nightfall DLP solution
• Evaluate existing Detection Rules
• Implement detection rules based on growth of the Vestwell platform
• Action against alerts triggered for DLP leakage
• Work closely with Engineering to provide guidance and advice on industry best practice security
• Authentication & Authorization
• Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth
• Support responses to DDQ's or Risk Questionnaires that come in from potential customers
• Day to Day, You May Also Be Expected To:
• Work closely with Legal and Compliance teams to evaluate and improve policies
• Work closely with the CorpIT team to evolve the onboarding and offboarding process with a focus on Security

• It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests
• Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well
• Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer
• We prioritize transparency and lack of surprise throughout the process