Senior Cybersecurity Analyst

About The Weather Company:

The Weather Company is the world’s leading weather provider, helping people and businesses make more informed decisions and take action in the face of weather. Together with advanced technology and AI, The Weather Company’s high-volume weather data, insights, advertising, and media solutions across the open web help people, businesses, and brands around the world prepare for and harness the power of weather in a scalable, privacy-forward way. The world’s most accurate forecaster globally, the company reaches hundreds of enterprise clients and more than 360 million monthly active users via its digital properties from The Weather Channel (weather.com) and Weather Underground (wunderground.com).

Job brief:

As a Senior Cyber Security Analyst, you will play a critical role in protecting our systems, data, and cloud environments from evolving cyber threats. You will lead incident response efforts, proactively hunt for advanced threats, and help shape and implement security controls across the organization. This role requires both deep technical expertise and the ability to influence cross-functional teams while mentoring junior analysts.

The impact you'll make:

• Identify security issues and risks associated with security events and manage the incident response process
• Participate in the incident response and investigation process for identified security events
• Support and implement new security initiatives within the cloud environment as the threat landscape changes
• Periodic security assessments and configuration review of the cloud environment
• Understanding of the tactics, techniques, and procedures of advanced attackers, to hunt for signs of APT activities
• Direct and influence multi-disciplinary teams in implementing and operating cloud security controls
• Sourcing and tracking of public vulnerability disclosure sources to assess the impact on our network/products and prioritize the patching efforts
• Maintain and update the security operational workflow
• Supporting Application Security and DevSecOps initiatives by championing secure development standards and advocating shift-left practices within the SDLC.
• Developing and implementing cybersecurity solutions to enhance the overall security posture across on-premises and cloud environments.
• Designing automation workflows and playbooks to streamline incident response and repetitive security tasks (SOAR).
• Lead team initiatives and mentor more junior members of the cybersecurity team
• Other duties as assigned.

What you've accomplished:

• Bachelor’s degree in Computer Science, Software Engineering, Computer Information Systems, Electrical Engineering or related field; or commensurate experience
• 5+  years of experience in cybersecurity and information security domains
• Security-relevant industry certifications from vendors such as CompTIA (e.g., Security+, CySA+), (ISC)² CISSP, or GIAC (e.g., GCIH, GCIA, GPEN)
• Experience providing administrator or SME-level support for endpoint security solutions such as CrowdStrike, HBSS, Tanium, Digital Guardian
• Experience administering application security tooling such as Checkmarx, Veracode, or Snyk
• Solid foundation of TCP/IP and other core protocols
• Experience in enterprise intrusion analysis, SIEM, and incident
• Solid understanding of Windows and Linux operating systems, and command-line tools
• Familiarity with network architecture and security infrastructure placement
• Creating, maintaining, upgrading/patching, and troubleshooting ESXi or Hyper-V hosted virtual machines
• Routing, switching, TCP/UDP/SSH/FTP/SCP/HTTPS protocols
• Industry knowledge of border testing, security policies, remediation strategies, and risk
• Experience with security information and event management solutions (SIEM), performing security incident response and/or investigation
• Experience evaluating networks, systems, and applications for vulnerabilities, including examining firewall rulesets, current patch levels, and inspecting logs for anomalous entries
• Experience with security services such as firewalls, IDS/IPS, and content filtering.
• Experience with data protection & archiving, disaster recovery, business continuity, and implementation
• Experience with tools including: Vulnerability scanners, Endpoint protection, IPS/IDS, SIEM, Malware
• Ability to create documentation that describes technical details to a non-technical audience
• Knowledge of industry best practices from organizations such as International Standards Organization (ISO), Center for Internet Security (CIS), and National Institute of Standards (NIST)
• Knowledge of IT controls, including security concepts and terminology related to applications, databases, operating systems, and IT operations
• Experience with information security, cyber security, and privacy issues, and awareness of regulated data environments (e.g., PCI, SOX, FERPA, HIPAA, and COPPA)

Nice to have

• Penetration Testing experience is a plus.
• Experience with cloud incident response is a plus (e.g., AWS, GCP, Azure)
• Experience working with N-Tier architecture
• Windows and Linux scripting
• Infrastructure-as-Code (e.g. Terraform, Puppet) experience is a plus
• Certifications from vendors such as Cisco, McAfee, Microsoft, Oracle, Red Hat, Symantec, or VMware