Cyber Security Analyst
Description
The Role
At Fusion, we "Protect the Covenant of Trust" between our Software Users and our customers' key stakeholders. A key element of protecting that covenant of trust is ensuring our software and organization follow industry best practices to ensure the security and integrity of customer data. The Cyber Security Analyst will play a vital role in this critical objective.
The Cyber Security Analyst will report directly to the Director of Cyber Security and will assist in maintaining and optimizing Infrastructure and Product security, documentation, and adherence to Fusion's policies and standards.
Responsibilities of this role include:
- Assist in yearly 3rd Party Audits of Fusion including but not limited to Fusion's SOC 2, Salesforce.com Security Review of Fusion Assets, Fusion Framework Penetration Testing, and more as needed.
- Participate in discussions with prospects and customer IT Security Teams during the Sales and Vendor Due Diligence processes, explaining the security posture of the Fusion Framework System, as well as the security posture of Fusion Risk Management as an organization.
- Perform security due diligence on Fusion's 3rd Party Vendors, ensuring they comply with Fusion's security standards.
- Follow Daily, Weekly, and Monthly security routines and report.
- Monitor Security logs, SIEM, IDS/IPS, endpoints, etc. for security alerts, identify vulnerabilities and configuration issues and resolve or escalate accordingly.
- Maintain the operational integrity of the Security Operations Center (SOC) through monitoring and periodic testing of critical tools and processes.
Requirements
Required
- Knowledge of Windows security settings and controls
- Awareness of current security threats and have an understanding of security standards, practices, procedures, and tools
- Critical thinking and problem-solving skills
- Strong written/verbal communication skills
- Strong interpersonal and organization skills
Preferred
- Bachelor's degree or comparable experience in a Windows environment
- Prior Information Security experience or certification is a plus
- Cloud Computing Security experience with any hyperscale cloud service provider including Salesforce, ServiceNow, AWS, Azure, and/or Google Cloud