Analyst, Cybersecurity
Vestwell is a financial technology company based in New York City, focused on redefining savings for retirement, education, and healthcare needs. They are seeking a meticulous Cybersecurity Analyst to monitor and secure their infrastructure, filter for suspicious activity, and mitigate security risks.
Responsibilities
- Manage all day-to-day activities within the Security organization
- Management of Anti-Virus and Anti-Malware solutions like CrowdStrike
- Monitoring and alerting management
- Confirm infrastructure has most recent patches, updates and libraries
- Management of 1Password
- Management of vaults and user access for both passwords and keys
- Management of KnowBe4
- Phishing tests and training and response
- Develop ongoing security posture improvements
- Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected
- Management of Nightfall DLP solution
- Evaluate existing Detection Rules
- Implement detection rules based on growth of the Vestwell platform
- Action against alerts triggered for DLP leakage
- Work closely with Engineering to provide guidance and advice on industry best practice security
- Authentication & Authorization
- Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth
- Support responses to DDQ's or Risk Questionnaires that come in from potential customers
- Work closely with Legal and Compliance teams to evaluate and improve policies
- Work closely with the CorpIT team to evolve the onboarding and offboarding process with a focus on Security
Skills
- Professional experience in computer science, programming, or related field
- Professional experience working in computer systems with some specialization in computer security
- The ability to manage competing deadlines
- Excellent verbal and written communication skills, interpersonal, and teaching skills
- Ability to anticipate, analyze, and problem-solve
- The ability to remain current on the latest technology and best practices in information security
- Proficient, or able to gain proficiency with, a broad array of security software applications and tools
- Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication
- Experienced with penetration testing and techniques
- Understand patch management
- Advanced training certifications may be advantageous
- CISSP
- Training or experience with SOC audits
- Training or experience with Financial Regulatory Audits/Compliance (ERISA, SEC, etc.)
Benefits
- Competitive health coverage
- Generous vacation offering
- Great 401(k) plan
Company Overview
Company H1B Sponsorship