Job Title: Security AnalystArea: IT – Technology ServicesReports to: Manager of Enterprise SecurityClassification: ExemptThis position is designated as Hybrid – Fully Flexible and expected to work from our World Headquarters office once per month to several times a week (at manager’s discretion). Rotary is under the jurisdiction of Illinois employment laws; we require all employees to live within reasonable daily commuting distance to Evanston.Organization OverviewRotary is a membership organization that unites people from all continents and cultures who take action to deliver real, long-term solutions to pressing issues facing our communities and the world. Each year, Rotary members expand their networks, build lasting relationships, and invest more than $300 million and 16 million volunteer hours to improve lives and create positive change in the world. In exchange for hard work and dedication in support of Rotary’s clubs, members and other participants, and their humanitarian service projects, our employees receive competitive salaries, flexible schedules, comprehensive benefits, and job enrichment. To learn more, visit http://www.rotary.org.Rotary’s Commitment to DiversityAs a global network that strives to build a world where people unite and take action to create lasting change, Rotary values diversity and celebrates the contributions of people of all backgrounds, regardless of their age, ethnicity, race, color, abilities, religion, socioeconomic status, culture, sex, sexual orientation, and gender identity.OverviewRotary Technology Services team seeks to fill the role of Enterprise Security Analyst. The ideal candidate will play a vital role in keeping Rotary’s proprietary and sensitive information secure. The person will be working across departments to identify and correct flaws in the company’s security systems, solutions, and programs while recommending specific measures that can improve the company’s overall security posture.You Will Have
- Bachelor’s degree in Computer/Information Science or Business Analytics with 2 or more courses in Security
- At least one Security certification
- Solid understanding of IT architecture and security technologies
- 2-4 years of experience in cyber security incident handling
- Forensics (Intrusion incident) investigation
- Familiarity with centralized logging (Windows, Linux, Networks, Firewalls, etc.)
- Ability to translate results from pen tests into actionable items
- Ability to extract and analyze useful information from security tools
- Advance user of Excel and Analytics tools
- Strong communication capabilities
- Preferred candidate will have experience in several of the following (or, similar) software: Axonius, Cloudflare, Defender, Entrust, eramba, Netwrix, Qualys, Rapid7, Trustwave, Varonis
You Are Good At
- Monitoring Information Security alerts using SIEM to triage, mitigate, and escalate issues as needed while capturing essential details and artifacts
- Grasping vulnerabilities identified with SAST, DAST and Penetration Testing, and the solutions
- Identifying and acting on any malicious or anomalous activity
- Mentoring operational support teams as needed
- Preparing clear and concise written incident reports
- Following security trends and direction technology must take to support the business
- Understanding various components of network and infrastructure (networking protocol knowledge is an advantage – TCP/IP, HTTP, HTTPS, DNS, DHCP, firewalls, proxies, IDS, IPS etc
You Will Be Responsible For
- Under limited supervision, performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction
- Responsible for the design, implementation, management and review of Rotary’s security policies, standards, baselines, procedures, and guidelines
- Prioritizing vulnerabilities identified with SAST, DAST and Penetration Testing, and actively engaging with the different teams on remediation strategy
- Responding to incoming reports of security incidents from the organization via calls and emails
- Performing analysis of security alerts to evaluate risk, determine containment action and identify required preventative measures
- Collaborating with operational support teams to ensure they are actively engaged in incidence response process
- Working with HQ and International Offices to identify the appropriate incident response and remediation plan
- Initiating timely and effective notifications and response measures for critical incidents or emergencies
- Mitigating and containing identified threats using approved incident response methodologies
- Ensuring proper documentation of security incidents including attack details
- Participating in root cause analysis or lessons learned sessions
- Documenting all incidents and building a knowledge base
- The ideal candidate will be the main point of contact for all security incidents and is able to communicate the security strategy, standards and guidelines set by the Security team to all stakeholders, explaining gaps, exceptions, deviations, and roadmaps visually and concisely
Leadership Attributes
- Collaboration: Build partnerships and work with others to meet shared objectives
- Innovation: Move Rotary beyond traditional ways of thinking
- Adaptability: Respond to changes willingly and recognize when to adjust based on the situation
Why work for Rotary?
- Generous medical, dental, and vision benefits package
- Progressive 401k matching contributions
- Above market and generous paid time off package
- Tuition reimbursement
- Professional development opportunities
- On-site cafeteria and coffee bar with special pricing for Rotary employees
- Flextime-several different work schedules to choose from
- Close to CTA, Metra, a variety of stores, and many food options
Please Note
- Rotary does not provide VISA sponsorship or relocation assistance
