Hybrid Information Security Analyst (Pulte Mortgage) chez PulteGroup
PulteGroup · Englewood, CO, États-Unis d'Amérique · Hybrid
- Bureau à Englewood, CO
The Information Security Analyst is tasked with safeguarding our digital assets and information systems by identifying and addressing security threats. This role involves conducting comprehensive security assessments, monitoring network activity for potential breaches, responding to security events and incidents, and implementing strong security measures. The Security Analyst works with various departments to investigate and respond to security incidents and stays current on the latest cybersecurity trends to proactively defend the organization against emerging threats.
Primary Job Responsibilities:
Monitors the organization's networks for security events and investigates when one occurs. Documents incidents and measures the impact.
Conducts or coordinates vulnerability scans and penetration tests, documents findings, and recommends risk mitigation strategies.
Assists other technical support staff in identifying and implementing appropriate security safeguards, including patch application and endpoint protection strategies.
Analyzes and interprets data from information security tools such as Security Information Event Management (SIEM) systems, firewalls, email security gateways, and endpoint detection and response (EDR) platforms.
Develops scripts, tools, and procedures to automate scans, assessments, and other monitoring and discovery activities. Evaluates and makes recommendations for process and tool optimization.
Designs, executes, maintains, tests, and improves the organization’s incident response procedures.
Monitors industry changes, news, threat intelligence, and relevant trends and develops new processes and response techniques.
Identifies, defines, and prepares targeted security metrics and reports.
Provides guidance to less experienced Security Analysts.
Leads moderately complex process improvement efforts within the Information Security team.
Participates in Information Security team on-call as assigned (after hours, weekends, holidays) or when security events require immediate response.
Performs other duties as assigned.
Organizational Impact:
Works to achieve day-to-day objectives with moderate impact on the area.
Works independently on larger, moderately complex projects/assignments.
Sets objectives for own area to meet the objectives or goals of projects and assignments.
May assist other professionals with tasks and assignments.
Leadership & Talent Management:
May provide guidance and assistance to entry level professionals and/or support employees.
Education Requirements:
Requires practical knowledge of area typically obtained through advanced education combined with experience.
Typically requires a university degree or equivalent experience and minimum 2-4 years of prior relevant experience.
Required Skills:
Cybersecurity frameworks with a preference toward NIST CSF
Vulnerability Management
Firewall concepts and administration
SIEM
Enterprise-class networking and infrastructure knowledge
Attack techniques and response actions
Email security
Penetration testing and remediation
Endpoint protection
Required Licensing, Registration and/or Certifications:
Security+ or other relevant certification preferred
PulteGroup, Inc. and its affiliates do not accept unsolicited resumes from individual recruiters or third party recruiting agencies (collectively, “Recruiters”) in response to job postings. If Recruiters nevertheless submit one or more unsolicited resumes to any employee at PulteGroup, Inc. or its affiliates without a valid written agreement in place for this position, it will be deemed the sole property of PulteGroup, Inc. and its affiliates. No fee will be owing or paid to Recruiters who submit unsolicited candidates, in the event the candidate is hired by PulteGroup, Inc. or its affiliates as a result of the referral, without a written agreement between PulteGroup, Inc. and through any means other than via our Applicant Tracking System.