Are you a highly motivated and experienced Information Security professional passionate about protecting critical assets and data? If so, you might be a great fit for the Senior Information Security Analyst role here at ASSA ABLOY Opening Solutions Americas!
In this pivotal role, you’ll be instrumental in safeguarding our organization’s information systems, infrastructure, and data from evolving cyber threats. You’ll leverage your deep technical expertise to lead initiatives and contribute significantly to our overall security posture, driving continuous improvement and strategic security alignment.
This is an office-based position located in New Haven, CT.

• Incident Response & Management:
• Lead and actively participate in the end-to-end incident response lifecycle, from detection and analysis to containment, eradication, recovery, and post-incident review.
• Develop, refine, and implement incident response plans and playbooks, ensuring they align with industry best practices.
• Conduct forensic analysis on compromised systems to identify root causes, impact, and indicators of compromise (IOCs).Collaborate with cross-functional teams (IT Operations, Legal, etc.) during security incidents to ensure a coordinated and effective response, including effective crisis communication with stakeholders.
• 
  
  
  
• Threat Detection & Vulnerability Management:

• Perform advanced threat hunting to proactively identify and mitigate emerging threats and sophisticated attack techniques (TTPs).
• Conduct comprehensive vulnerability assessments and penetration testing (internal and external) to identify weaknesses in systems, applications, and networks.
• Manage and optimize vulnerability management programs, including scanning, analysis, prioritization, and remediation tracking.
• Analyze threat intelligence feeds to understand new attack vectors and inform defensive strategies.Engage in purple teaming exercises to continuously refine and improve defensive capabilities based on offensive insights.
• 
  
  
  
• Security Architecture & Engineering Support:

• Provide expert guidance on security best practices for new and existing systems, applications, and cloud environments (e.g., AWS, Azure, GCP).
• Support the design, implementation, and optimization of various security technologies, including SIEM/SOAR platforms, Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and Web Application Firewalls (WAF).
• Actively contribute to DevSecOps initiatives, integrating security controls and practices into the software development lifecycle (SDLC) and CI/CD pipelines, including performing threat modeling on applications and systems early in their development.
• Identify and implement opportunities for automation and orchestration of security tasks, tool integrations, and playbook development to enhance efficiency.Develop and implement security policies, standards, and procedures in alignment with industry frameworks (e.g., NIST, ISO 27001, MITRE ATT&CK) and the evolving legal and regulatory landscape around data privacy and cybersecurity (e.g., GDPR, CCPA, HIPAA, PCI DSS).
• 
  
  
  
• Security Operations & Monitoring:

• Monitor security events and alerts from various sources (SIEM, EDR, network devices) to detect and respond to potential security incidents.
• Develop and tune security monitoring rules, alerts, and dashboards.
• Participate in on-call rotations for critical security incidents as needed.Assist with internal and external audits, providing necessary documentation and evidence of compliance.
• 
  
  
  
• Strategic Security & Leadership:

• Serve as a subject matter expert within the information security domain, staying abreast of emerging technologies and trends (e.g., AI in cybersecurity, Zero Trust architecture, quantum computing risks, supply chain security).
• Lead small to medium-sized security projects and initiatives, demonstrating strong project management skills.
• Communicate complex technical security concepts clearly and concisely to both technical and non-technical stakeholders, including senior management, aligning security initiatives with business goals and translating technical risks into business risks.
• Contribute to the development and delivery of security awareness and training programs for employees.
• Recommend cost-effective security measures and maintain an awareness of security solution budgets.
• Evaluate, select, and manage relationships with security vendors and their solutions, including understanding SLAs and security clauses in contracts.