Job details
Job type full-time
Full job description
Team : information technology
Reports to : smd, it security & risk management
Location : new york, new york
The role
You are a member of it’s strategy, planning & solutions team and the information security sub-team which plays a lead role in proactively improving teach for america’s security posture in our on-prem and cloud infrastructureYou are responsible for a broad range of tasks, including the day-to-day monitoring of information security alertsThe role is the primary security operations analyst for a variety of security tools including the security information and event management system (siem) and is expected to correlate logs from a variety of sources to investigate and identify risks to the enterpriseYou are also accountable as the incident coordinator supporting the incident manager in following the cybersecurity incident response plan during a security incidentThis position requires collaboration between all it sub-teams in order to keep tfa systems and applications secure.
You will report to the smd, it security & risk management and will also support the md, information security to investigate and remediate vulnerabilities across the enterprise in a timely fashionIn addition, you will support external and internal audits as necessary to measure and improve teach for america’s security postureYou are also responsible for executing on project objectives and tasks.
Tfa does not sponsor candidates for work visas for this position.
The person
Responsibilities include, but are not limited to:
Conducts log-based and endpoint-based threat detection to detect, protect and respond against threats coming from multiple sources - 20%
Manages the security information and event management (siem) tool to tune the system, create/manage the detection content and actively monitor alerts - 20%
Correlates activity and alerts across assets (endpoint, network, apps) and environments (on-prem, cloud) to identify patterns of anomalous activity - 15%
Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems - 10%
Correlates network, cloud and endpoint activity across environments to identify attacks and unauthorized use - 5%
Collate security incident and event data to produce management reports as necessary - 5%
Supports periodic audits of the it security posture and executes on corrective actions including the monitoring of identities and internal control systems - 5%
Researches emerging threats and vulnerabilities to aid in the identification of incidents – 5%
Provides users with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary - 5%
Performs security standards testing against endpoints and the enterprise before implementation to ensure security requirements are met - 5%
Develop and maintain documentation for security systems and procedures- 5%
The must haves
2 to 3+ years of cybersecurity operations experience
5-7 years of relevant it experience
Working knowledge of information security landscape, tools & techniques
Direct, hands-on experience managing security infrastructure such as firewalls, ipss, wafs, endpoint protection, siem and log management technology
Direct, hands-on experience using vulnerability management tools
Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises
Experience with or knowledgeable of threat intelligence and/or threat-hunting tools
Strong working knowledge of it service management including change and incident management
Working knowledge of the national institute of standards and technology (nist) framework or similar cybersecurity frameworks
Has good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity
Excellent research and analytical skills with the ability to understand and present data in a variety of ways
Operates effectively, and with a sense of possibility and positive attitude in a fast-paced, deadline-driven environment
Must be detail-oriented, extremely organized, and have exceptional written and communication skills
Ability to manage multiple projects and tasks concurrently and the ability to adapt to change
Ability to learn new technology quickly
Strong presentation, problem-solving and trouble-shooting skills
Academic qualifications/certifications:
Bachelor’s degree is highly preferred
Cissp, cisa or cism certifications a plus
The team
The information security team is a unit of three tasked with keeping tfa safe from cyber threatsOur team is accountable for cybersecurity, risk, and it policy managementWe are responsible for identifying vulnerabilities and risks and monitoring for security alerts that require mitigation strategies by collaborating with the teams that are responsible for their respective areaOur team leads external penetration tests and tabletop exercises to create awareness of our security gaps and continuously improve our response capabilities.
The perks
By joining staff , you join a network of individuals committed to pursuing equity for all students and developing themselves as professionals in the processWe as an organization value the longevity of our employees and offer a comprehensive and competitive benefits planThe salary for this position is also competitive and depends on your prior work experiencePlease be advised, you will have an opportunity to discuss salary in more detail after you begin the application process.
Next steps
Interested in this position? apply now! scroll down to the bottom of the page and click applyIf you still have questions regarding the role, feel free to contact our recruitment team at staffhiring@teachforamerica.org or visit www.teachforamerica.org/about-us/careers
Colorado residents : if you are based in colorado, please click here for total rewards information.
