Infrastructure Security Analyst

Infrastructure Security Analyst

The Infrastructure Security Analyst will play a critical role in ensuring the security and integrity of our IT systems and networks. This position involves a balanced focus on IT Systems and Network Support and Cybersecurity with a concentration on Vulnerability Management. The ideal candidate will possess both technical expertise and strong analytical skills to identify, mitigate, and manage vulnerabilities while supporting the overall IT infrastructure. The candidate will thrive in a dynamic, team-oriented environment, where knowledge sharing, and continuous learning are encouraged. As an integral part of our collaborative team, the Infrastructure Security Analyst will work closely with various IT departments, including network operations, system administration, and application development. This role includes direct collaboration with the Senior Cybersecurity Engineer to ensure thorough analysis, identification, and mitigation of infrastructure vulnerabilities. Together, the team will address evolving cyber threats, communicate complex security concepts to stakeholders across all levels, and promote an organization-wide security culture while supporting Versiti's business and operational goals. This position values teamwork, encouraging information sharing and joint problem-solving to fortify the organization's defenses. This role is essential in building a resilient IT infrastructure that can adapt to evolving threats while supporting the organization's business objectives.

Responsibilities:

• Provide technical support for IT infrastructure, including servers, networks, and cloud services.
• Monitor system performance, troubleshoot issues, and perform regular maintenance on IT systems and document system configurations, changes, and procedures for future reference and compliance audits.
• Collaborate with IT teams to implement and maintain secure network configurations and ensure compliance with organizational policies while assisting in the deployment and configuration of hardware and software as needed.
• Respond to and resolve service requests and incidents in a timely manner.
• Conduct regular vulnerability assessments and penetration testing to identify security weaknesses within IT systems and networks and collaborate with IT teams to develop and implement mitigation strategies for identified vulnerabilities.
• Analyze vulnerability scan reports and prioritize remediation efforts based on risk assessment and monitor security alerts and incidents, responding to security breaches or threats as necessary.
• Maintain up-to-date knowledge of the latest cybersecurity threats, vulnerabilities, and trends. Utilize threat intelligence feeds and monitoring tools to proactively identify and mitigate potential security threats. Provide recommendations for security improvements and help implement new security controls.
• Performs other duties as required or assigned which are reasonably within the scope of the duties in this job classification
• Understands and performs in accordance with all applicable regulatory and compliance requirements
• Complies with all standard operating policies and procedures

Qualifications:

Education

• Bachelor's Degree Computer Science, Information Technology, Cybersecurity, or a related field preferred

Experience

• 4-6 years Demonstrated experience installing, managing and troubleshooting Linux and/or Microsoft Server environments. required
• 4-6 years Experience with Enterprise Data Center Server and Network environments. required
• 4-6 years Experience in conducting vulnerability assessments and penetration testing. required
• Demonstrated experience with VMware Server and storage management. preferred

Knowledge, Skills and Abilities

• Understanding of patch management processes and tools required
• Knowledge of common security frameworks (e.g., NIST, ISO 27001, CIS Controls) required
• Strong analytical and problem-solving skills. required
• Excellent communication skills, both verbal and written, with the ability to explain technical concepts to non-technical stakeholders. required
• Strong attention to detail and ability to work independently as well as part of a team. required
• Experience with ticketing systems and IT service management processes. required
• Familiarity with scripting languages (e.g., PowerShell, Python). preferred

Licenses and Certifications

• Certified Ethical Hacker (CEH) desired
• CISSP Certified Information Systems Security Professional desired
• Microsoft Certified Systems Engineer (MCSE) preferred
• Microsoft Certified Systems Administrator (MCSA) preferred
• CompTIA Network+ Certification preferred
• CompTIA Security+ Certification preferred

Tools and Technology

• Proficiency in network protocols, firewalls, VPNs, and security appliances. required
• Experience with vulnerability assessment tools (e.g., Nessus, Qualys, Rapid7). required
• Knowledge of operating systems (Windows, Linux) and cloud environments (AWS, Azure). required
• Experience with container technologies (e.g., Docker, Kubernetes) preferred
• Familiarity with threat intelligence and incident response processes. preferred