IT Security Analyst Tiffany & Co.
Parsippany, NJ

Job Description

Overview

Tiffany & Co. is currently seeking an IT Security Analyst out of our Parsippany, NJ offices. The primary purpose of this position is daily operational monitoring and escalation of information security events and the examination of these events for context and criticality. This position is also responsible for the collection and monitoring of risk metrics from operational security controls such as vulnerability scanning, system patching, penetration testing, and other security event sources.

Responsibilities

The IT Security Analyst will perform the ongoing monitoring and operation of select security and compliance-related systems, and will identify and address security events; including driving investigation and remediation with alerts impacting other technology teams. S/he will also track operational metrics related to alerts, incidents, and vulnerabilities and be responsible to create and maintain appropriate documentation especially process flows and technical procedures. The position also responds to production problems, performs troubleshooting and determines root cause analysis, as necessary.

Qualifications

* Bachelor's Degree in IT or Technology related field
* 0-3 years of experience
* Knowledge of the Technologies and Products including:
* Intrusion Detection and Prevention
* Change Management Monitoring
* Web Content Filtering
* Compliance Monitoring
* Vulnerability and Application Scanning
* Web Vulnerability Scanning
* Endpoint Security
* Risk Management Tools


* Excellent communication skills with the ability to track and drive an incident to resolution
* Ability to collaborate with the IT & business area professionals
* Ability to manage multiple tasks and projects simultaneously
* Rotational off-hour, on-call coverage required
* Specific product experience that is desirable includes: McAfee, IBM Qradar SIEM, Insight VM, Palo Alto Enterprise Firewall System, Tripwire Enterprise preferred
* Knowledge of regulatory frameworks desired (e.g. PCI, SOX, SSAE16, ISO 27001)
* CISSP, GCUH, CEH, or other forensic certification desired

#LI-POST7