Information Security Analyst

Our Company: ISN was established in 2001 and is a global leader in contractor and supplier management.

We work closely with a variety of household-name clients in the US, Canada, Europe, Australia, Latin America, and the Middle East to connect them with safe and reliable contractors and suppliers and incorporate a level of due diligence in the contractor management process.

The Position: The Information Security Analyst position will be responsible for providing technical and business assistance for a wide variety of information security related matters.

The Information Security Analyst will assist in the implementation and on-going maintenance/tuning of security systems to protect the organization's networks from cyber attacks.

Who should apply?

• 4+ years of technical experience, including 2+ years in an information security technical role
• CISSP, CEH, GIAC, CompTIA Security+/CySA+, or similar relevant information security certifications.
• Hands on experience with mitigating security controls (EDR/XDR, IPS/IDS, DLP, email security, web and network proxies, URL content filtering, multi-factor authentication, VPN/zero trust network access) and how they work in an overall defense in depth risk assessment methodology.
• Hands-on fluency with SIEM, SOAR, and EDR platforms (e.g., Microsoft Sentinel, Splunk, CrowdStrike) for security monitoring, investigation, and response, with the ability to ramp up quickly on existing tooling.
• Familiarity with AI-assisted security tooling and an understanding of security risks associated with AI and large language model (LLM) technologies (e.g., data leakage, prompt injection).
• Experience with cloud technologies and architecture is an asset, including cloud security capabilities in platforms such as Microsoft Azure and AWS

• Monitor, operate, and tuneSIEM, EDR/XDR, email security, and cloud security platforms.
• Support vulnerability management activities, including scanning, risk-based prioritization, and remediation tracking
• Respond to endpoint detection and response (EDR) alertinvestigating, containing, and remediating threats, and escalating as required.
• Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.