Jobs
>
Cleveland

    Senior Security Analyst - Cleveland, United States - ReliabilityFirst

    ReliabilityFirst
    ReliabilityFirst Cleveland, United States

    4 days ago

    Default job background
    Description

    About RF:

    Do not wait to apply after reading this description a high application volume is expected for this opportunity.

    ReliabilityFirst Corporation is a regulator focused on the reliability and security of the electric grid. ReliabilityFirst's mission is to preserve and enhance the reliability, security, and resilience of the Bulk Power System across 13 states and the District of Columbia. ReliabilityFirst is uniquely positioned to work closely with transmission, generation, and other power companies as well as the federal government to help identify and ensure the mitigation of operational risks and physical and cyber security threats to the electric grid.

    Purpose of Position:

    The Senior Security Analyst will play a pivotal role in contributing and administering the comprehensive information security program within the Information Technology (IT) team. This role is responsible for researching, designing, and implementing the physical and cyber security solutions at RF. In coordination with our in-house Security Team, this role will work as the IT liaison for both internal and external stakeholders to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software.

    The Senior Security Analyst's goal is to provide thought leadership and IT security support across the organization to improve the security posture of ReliabilityFirst overall. This position reports to the Manager, IT Infrastructure and Security and works closely with our Security and Data Analytics teams.

    Key Responsibilities:

    1. Cloud & Physical Security

    • Maintain high-level security posture for both the cloud and physical infrastructure environment by leading and assisting in IT security tasks as assigned.
    • Analyze and evaluate current security posture and propose changes/upgrades to firewalls, intrusion detection/prevention, endpoint protection, SIEM, data loss prevention, and vulnerability within our organization.
    • Assist with security related processes including, but not limited to, Access Management, Mobile Device compliance, Phishing, and Security Reviews.

    2. Threat Lifecycle Management

    • Know the technical aspects of projects to identify risks, propose immediate solutions and provide guidance for the computer system solutions throughout the organization.
    • Analyze and resolve security vulnerabilities with applications software/firmware using carious scanning and patch management tools.
    • Assist in mitigation process of threats and vulnerabilities identified by internal or external penetration testing and vulnerability assessments.
    • Assist with preparation of assessment reports and resulting mitigation tracking documentation and root cause analysis (RCA).

    3. Communication

    • Contribute to the design and implementation of security processes, procedures, and tools to meet the company's compliance requirements as define in approved security frameworks.
    • Act as a liaison between RF's IT and Security Team to accomplish mutual tasks and goals.
    • Must be able to convey technical language to other stakeholders often in non-technical terms and create buy-in for the technical solutions.

    4. Report & Monitoring

    • Documenting and reporting any major security risk that has been identified to IT Manager and/or CSO while being available off-hours to respond to these risks.
    • Monitors and analyzes open source and internal data sources to identify trending security issues and alert management to developments, changes and shifts in risk.

    5. Relationship Management

    • Develop, maintain, and evaluate relationships with vendor technology groups to ensure they are meeting company standards and are being utilized appropriately.
    • Develop strong working relationships with team members and leaders within ReliabilityFirst to have full grasp of security activities happening as it relates to the technical needs of each department.
    • Work collaboratively with NERC (North American Electrical Reliability Corporation), the Electric Reliability Organization (ERO), and the Information Technology Security Group (ITSG) to continuously monitor and assess best IT practices and lead continuous improvement.

    Qualifications:

    • Bachelor's and/or Technical degree in Computer Science, Information Systems, Computer or Systems Engineering, or related technical field required
    • At least 7+ years of hands-on systems applications experience with cyber security experience across all security domains
    • Experience making strategic decisions derived from threat and risk-based analysis
    • Demonstrated understanding of best practices in cyber/physical security encompassing strategies, policies, principles, procedures, and standards
    • Strong leadership qualities
    • Excellent analytical skills
    • High attention to detail
    • Good communication skills

    Desirable:

    • Desired certifications include: ISC(2) CISSP or SANS GCWN/GSEC/GCIH/GPEN
    • Significant experience with cloud security including Azure and M365
    • Experience with multiple security technologies to include firewalls, intrusion detection/prevention, endpoint protection, SIEM, data loss prevention, and vulnerability scanners

    ReliabilityFirst is an equal opportunity employer and is committed to providing equal opportunities to all employees and applicants in accordance with local and federal laws. ReliabilityFirst's mission is to preserve and enhance bulk power system reliability and security. This mission cannot be accomplished without a diverse and inclusive staff - one that at all levels feels empowered, valued, respected, and engaged.

    Learn more at: Diversity, Equity, & Inclusion at RF )


  • Cleveland-Cliffs Inc

    Security Analyst

    1 day ago


    Cleveland-Cliffs Inc Cleveland, United States

    Cleveland-Cliffs Steel has an immediate opening for a dedicated and detail-oriented Program Analyst in our Security Department in Cleveland-Cliffs HQ, based in Cleveland, Ohio. The ideal candidate will have a passion for leveraging data analytics to improve security protocols, id ...

  • Cleveland-Cliffs Inc

    Security Analyst

    3 days ago


    Cleveland-Cliffs Inc Cleveland, United States

    Cleveland-Cliffs Steel has an immediate opening for a dedicated and detail-oriented Program Analyst in our Security Department in Cleveland-Cliffs HQ, based in Cleveland, Ohio. The ideal candidate will have a passion for leveraging data analytics to improve security protocols, id ...


  • ReliabilityFirst Corporation Cleveland, United States

    About RF: · ReliabilityFirst Corporation is a regulator focused on the reliability and security of the electric grid. ReliabilityFirst's mission is to preserve and enhance the reliability, security, and resilience of the Bulk Power System across 13 states and the District of Colu ...


  • MCPc Cleveland, United States

    Company Description · Fortress Security Risk Management is a nationally recognized full-spectrum cybersecurity firm dedicated to protecting its clients from the financial, operational, and emotional ravages of cybercrime. Headquartered in Cleveland, OH, Fortress primarily has a ...


  • The Sherwin-Williams Company Cleveland, United States

    Strategy & Planning Participate in the planning and designing of enterprise security architecture, under the direction of the IT Lead Security Analyst, where appropriate. · Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, ...


  • MCPc Holdings, Inc. Cleveland, United States

    Fortress Security Risk Management is a nationally recognized full-spectrum cybersecurity firm dedicated to protecting its clients from the financial, operational, and emotional ravages of cybercrime. Headquartered in Cleveland, OH, Fortress primarily has a regional footprint but ...


  • ReliabilityFirst Cleveland, United States

    About RF: · ReliabilityFirst Corporation is a regulator focused on the reliability and security of the electric grid. ReliabilityFirsts mission is to preserve and enhance the reliability, security, and resilience of the Bulk Power System across 13 states and the District of Colu ...


  • Exodus Integrity Services Cleveland, United States

    Exodus Integrity Services, Inc is a rapidly expanding technology company headquartered in Northeast Ohio. EIS provides quality services to our clients by instilling honesty, commitment, and hard work to find the most qualified candidates to fill each opportunity.Currently, we are ...

  • Medical Mutual

    IT Security Analyst II

    14 hours ago


    Medical Mutual Cleveland, United States Full time

    Job Description - IT Security Analyst II - IV Job Description IT Security Analyst II - IV Description Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio. We provide peace of mind to more than 1.6 million Ohioans through ...


  • TalentBurst Cleveland, United States

    Job Title: Info Security Analyst · Position is 100% Remote · Duration of assignment until for now. · Start date is · Job Description: · The ideal candidate for this position has an in-depth knowledge of security and technology, with strong understanding of risk management. The ...


  • Sherwin-Williams Cleveland, United States

    Job Description · Strategy & PlanningParticipate in the planning and designing of enterprise security architecture, under the direction of the IT Lead Security Analyst, where appropriate. · Participate in the creation of enterprise security documents (policies, standards, baseli ...


  • The Sherwin-Williams Company Cleveland, United States

    Strategy & Planning · Participate in the planning and designing of enterprise security architecture, under the direction of the IT Lead Security Analyst, where appropriate. · Participate in the creation of enterprise security documents (policies, standards, baselines, guideline ...


  • RightTalents LLC Cleveland, United States

    Job Description: · The ideal candidate for this position has an in-depth knowledge of security and technology, with strong understanding of risk management. The candidate must be able to make decisions based on prior experience in a large enterprise environment and their solid u ...


  • RightTalents LLC Cleveland, United States

    Job Description: · The ideal candidate for this position has an in-depth knowledge of security and technology, with strong understanding of risk management. The candidate must be able to make decisions based on prior experience in a large enterprise environment and their solid ...


  • True North Consultants Cleveland, United States

    The Senior Information Security Analyst will have responsibility for executing and contributing to cyber-and information security programs. · What you'll do: · Participate in executing parts of the Division Information Security Plan. You will interface with Division and Global T ...


  • Interapt Cleveland, United States

    Interapt is seeking a motivated and detail-oriented · Junior Security Operations Analyst · to join our team. At Interapt, we are committed to transforming clients and empowering humans with technology. Our world-class technology services company attracts and develops the best t ...


  • First National Bank of Pennsylvania Cleveland, United States

    Primary Office Location: · One F.N.B. Boulevard. Hermitage, Pennsylvania · Join our team. Make a difference - for us and for your future. · Position Title: · Security Access Management Analyst 1Business Unit: · Risk ManagementReports to: · Manager of Security Access Managem ...


  • Sherwin-Williams Cleveland, United States

    Strategy & Planning · Acquire and interpret business requirements and functional specifications to create security non-functional requirements. · Work with the security architects to validate potential architectures through techniques like threat modeling. · Maintain knowledge ...


  • The Sherwin-Williams Company Cleveland, United States

    Strategy & Planning · Acquire and interpret business requirements and functional specifications to create security non-functional requirements. · Work with the security architects to validate potential architectures through techniques like threat modeling. · Maintain knowledge ...


  • Sherwin-Williams Cleveland, United States

    Strategy & Planning · Acquire and interpret business requirements and functional specifications to create security non-functional requirements. · Work with the security architects to validate potential architectures through techniques like threat modeling. · Maintain knowledge o ...