Overview:
The JFG Information Security Engineering & Operations Analyst plays a key role in engineering and maintaining JFG InfoSec solutions for protecting, detecting, analyzing, hunting for, and reporting on cybersecurity events related to malware, network intrusion, data loss protection and insider threat incidents. This role is also responsible for finding and reporting on internal and external vulnerabilities on JFG systems. This role will be supported by a Managed Detection & Response (MDR) service. Occasional off-hour and weekend work will be expected. Very little (less than 5%) business travel is expected in this role.

EDUCATION, CERTIFICATIONS & EXPERIENCE

• 
  
  
  
• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Computer Science preferred

• Types of preferred certifications: Microsoft AZ-500, GIAC-GCIH/GCIA/GCFE/GMON/GPEN, Security+, CEH, SSCP, JFG InfoSec Platforms
• Experience with Python and PowerShell scripting languages for automation.
  Come as you are.:
  Our culture embraces diversity, equity, & inclusion; one where everyone feels valued and heard. For more information on JFG’s culture and diversity efforts, including our employee resource groups, please visit the Diversity section of our career website

• Build, maintain, and work with IT, to ensure Information Security protective and detective controls are properly configured
• Subject Matter Expert (SME) on Microsoft Security Engineering (AZ-500)
• Work with Managed Detection & Response services and JFG IT to detect, analyze, contain, and remediate threats and vulnerabilities across the JFG environment
• Operate and support enterprise identity and access management, privileged access management, user password vault, email security, web security, host security, cloud security, vulnerability management, data loss protection, cybersecurity monitoring, cybersecurity incident response technologies
• Lead and report on incidents involving insider-threat, internal investigations and litigation support activities
• Incorporate Cyber Threat Intelligence into operational threat and vulnerability management reporting
• Operate and support regular user access reviews to ensure appropriate access
• Support weekly/monthly/quarterly/annual operational metrics, reports and dashboards
• Assist with maintaining the Cybersecurity Incident Response Plan
• Collaborate on the continuous improvement of Information Security Engineering & Operations processes, workflows, and procedures (e.g. RunBooks)
• Automate repetitive tasks and drive efficiencies with measurable benchmarks to show progress
• Depending on the experience of the candidate, technical ‘team lead’ responsibilities may apply to ensure delivery of InfoSec products and services (this is not a people manager position)