Information Security Analyst I


 Position Title: Information Security Analyst I Department: Technology Reports to: Information Security Manager                    Location: Remote Salary Range: $76,700 - $101,000 Vibrant Emotional Health’s groundbreaking solutions have delivered high quality services and support, when, where and how people need it for over 50 years. Through our state-of-the-art technology-enabled services, community wellness programs, and advocacy and education work, we are building a society in which emotional wellness can be a reality for everyone. Formerly the Mental Health Association of New York City (MHA-NYC), Vibrant Emotional Health’s groundbreaking solutions have delivered high quality services and support, when, where and how people need it for over 50 years. Through our state-of-the-art technology-enabled services, community wellness programs, and advocacy and education work, we are building a society in which emotional wellness can be a reality for everyone.

Overview: The Information Security Analyst I is responsible for cloud, infrastructure and application security, incident response, auditing, and other relevant aspects of the program, as required. This role is involved in day-to-day operations of the in-place security solutions.  The position plays a key role in protecting the confidentiality, integrity, and availability of all company data and systems.  This may include the identification, investigation, and resolution of security incidents detected by those systems.  Projects may include the implementation of new security solutions, participation in the creation and/or maintenance of policies, standards, baselines, guidelines, and procedures, as well as conducting vulnerability audits and assessments, and working with technology teams to update and maintain system security. The Security Analyst is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals. Duties/Responsibilities: Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically. Maintain up-to-date detailed knowledge of the Cybersecurity industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors. Assist with recommending additional security solutions or enhancements to existing security solutions to improve overall enterprise security. Review existing cloud, on-prem, and end-user system configurations, and make recommendations to improve security posture Monitor all in-place security solutions for efficient and appropriate operations. Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution. Respond to tickets for addressing security concerns, vulnerabilities, and end-user reported issues. Participate in investigations into problematic activity. Participate in the design and execution of vulnerability assessments, penetration tests, and security audits. Maintain up-to-date baselines using industry standard frameworks such as CIS and CSA for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Maintain operational configurations of all in-place security solutions as per the established baselines and industry best practices. Provide on-call support for end users for all in-place security solutions. Partner with AppDev to identify and remediate vulnerabilities in applications Participate in the planning