This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization. The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security systems.
Job Responsibility:
Manage all day-to-day activities within the Security organization
Management of Anti-Virus and Anti-Malware solutions like CrowdStrike
Monitoring and alerting management
Confirm infrastructure has most recent patches, updates and libraries
Management of 1Password
Management of vaults and user access for both passwords and keys
Management of KnowBe4
Phishing tests and training and response
Develop ongoing security posture improvements
Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected
Management of Nightfall DLP solution
Evaluate existing Detection Rules
Implement detection rules based on growth of the Vestwell platform
Action against alerts triggered for DLP leakage
Work closely with Engineering to provide guidance and advice on industry best practice security
Authentication & Authorization
Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth
Support responses to DDQ's or Risk Questionnaires that come in from potential customers
Work closely with Legal and Compliance teams to evaluate and improve policies
Work closely with the CorpIT team to evolve the onboarding and offboarding process with a focus on Security
Requirements:
Professional experience in computer science, programming, or related field
Professional experience working in computer systems with some specialization in computer security
The ability to manage competing deadlines
Excellent verbal and written communication skills, interpersonal, and teaching skills
Ability to anticipate, analyze, and problem-solve
The ability to remain current on the latest technology and best practices in information security
Proficient, or able to gain proficiency with, a broad array of security software applications and tools
Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication
Experienced with penetration testing and techniques
Understand patch management
Nice to have:
Advanced training certifications may be advantageous
CISSP
Training or experience with SOC audits
Training or experience with Financial Regulatory Audits/Compliance (ERISA, SEC, etc.)