Cybersecurity Analyst - Lancaster, United States - Saxton & Stump LLC

Description

Job Description

Saxton & Stump provides solutions for complex legal issues and partners with clients to create a roadmap for their success. We are committed to empowering and supporting clients by delivering five-star service and results-focused advice.

We are seeking a highly skilled and motivated Cybersecurity Analyst to join our dynamic team. As a cybersecurity analyst, you will be responsible for monitoring, identifying, analyzing, and responding to potential security incidents and threats. You will play a critical role in ensuring the confidentiality, integrity, and availability of our company's information systems and data. This role will support the cybersecurity efforts of the law firm and will report to the Information Technology Manager.

More about the role:

• Monitor and analyze security events and incidents to identify potential threats and vulnerabilities.
• Conduct regular security assessments and perform vulnerability and risk assessments on systems and applications, reporting prioritization on findings and work on the recommendations/controls for risk mitigation/remediation.
• Implement and maintain security measures, including firewalls, intrusion detection systems, antivirus software, and encryption tools.
• Develop and update incident response plans and procedures.
• Investigate and respond to security incidents, perform forensic analysis, and take appropriate action to contain and mitigate risks.
• Stay up to date with the latest cybersecurity trends, technologies, and best practices.
• Provide guidance and support to internal teams on security-related matters.
• Collaborate with cross-functional teams to ensure compliance with relevant regulatory requirements and industry standards.
• Participate in the design and implementation of security controls and strategies.
• Implement and administer cybersecurity awareness and training programs to include conducting internal phishing tests.

• Bachelor's degree in computer science, Information Security, a related certification (e.g., Sec+, CySA+, CISSP) or 5 years of experience with Information Security.
• 3-5 years' experience working as a cybersecurity analyst or in a similar role.
• Knowledge of network security architecture concepts, including topology, protocols, components, principles, and networking protocols and services, such as FTP, HTTP, SSH, SMB, and LDAP
• Familiarity with cybersecurity frameworks, such as NIST, ISO 27001, or CIS.
• Experience with common cybersecurity tools and platforms such as Nessus, Microsoft O365, Microsoft Azure, SIEM, EDR/XDR, and email protection
• Strong understanding of security incident response and forensic analysis.
• Knowledge of cyber threat intelligence models, including MITRE ATT&CK, Kill Chain, and Diamond Model.
• Proficiency in scripting and programming languages.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Preferred Experience:

• Experience with Packet analysis tools, including tcpdump, Wireshark, and ngrep.
• PAM, ZTNA, SAASE experience.
• Experience with speaking to and presenting to an audience.
• Security Appliance such as Cisco Meraki experience.

Benefits:

• Competitive salary and benefits package.
• Opportunities for professional development and career growth.
• Collaborative and inclusive work environment.
• Cutting-edge technology and tools.

This position is hybrid based in the Lancaster, PA office.