Information Security Analyst III

Role Overview

As a senior member of Datamark's Information Security Team, the Information Security Analyst III takes charge of managing the company's most critical security operations. The role primarily involves leading the response to High and Critical severity security incidents using hands-on experience to contain, eliminate, and recover from threats effectively. Responsibilities include the implementation of new security controls, upkeep of existing measures, and mentorship of junior security analysts.

Key Duties and Responsibilities

• Lead and respond to all high-impact security tickets and incidents with full ownership.
• Perform comprehensive incident response, including containment, eradication, recovery, and post-incident analysis with lessons learned documentation.
• Oversee deployment and maintenance of security controls, ensuring ongoing efficacy and tuning.
• Partner with the Director of Information Security to develop security architecture, standards, and roadmaps.
• Guide and mentor Information Security Analyst I and II personnel, focusing on growth and development.
• Continuously monitor systems and threat intelligence to identify and prioritize risks, driving remediation efforts.
• Evaluate and recommend new security tools and technology based on organizational needs.
• Prepare monthly reports on security and compliance metrics.
• Develop and update incident response playbooks, runbooks, and operating procedures.
• Assist in assessing risks related to new technology deployments to ensure compliance with security standards.
• Manage enterprise IT security systems, troubleshoot complex issues, and maintain network and data flow documentation.
• Serve as senior lead for key security platforms including SIEM/MDR, PAM, DLP, NAC, NDR, ensuring their operation, tuning, and incident investigation.
• Maintain working knowledge of Microsoft Entra ID, Cisco Secure Access, Universal SSO, micro-segmentation, CSPM, and AI security frameworks.

Technical Platforms and Systems

• Supervise the configuration, monitoring, and fine-tuning of SIEM/MDR systems to improve threat detection accuracy.
• Maintain Privileged Access Management at the application level and monitor privileged account activities.
• Manage Data Loss Prevention policies and alerts to prevent data breaches effectively.
• Oversee Network Access Control systems ensuring policy enforcement and timely incident response.
• Monitor and adjust Network Detection and Response systems based on threat signals and system performance.

Additional Responsibilities

Stay informed on emerging technologies and their security implications, collaborate in designing internal frameworks for AI-based application security, and take responsibility for any new technical security controls introduced.

Eligibility

Applicants must hold a graduate degree.