Security Analyst 1

Jhpiego is seeking a Security Analyst to support its enterprise network systems.

The Security Analyst is responsible for monitoring security platforms; triaging and assisting with remediating security incidents; monitoring, analysis, and reporting of the network infrastructure at Jhpiego offices; ensuring systems are up-to-date; documenting specific processes and procedures, as needed; and making recommendations for improvement of IT services, as required.

The Security Analyst is responsible for monitoring Jhpiego’s enterprise SIEM and network systems, ensuring resolution of security events. The Security Analyst monitors all aspects of the network infrastructure, responds to issues and escalates to Sr. Engineers, and works with the Global IT team on infrastructure maintenance, upgrades, and implementations across Jhpiego offices. The Security Analyst is a member of Jhpiego’s Global IT team, and follows direction from the Senior Security Engineer.

The nature of this work requires an individual who is service-oriented, organized, collaborative, and who can interact with diverse end-users and technical staff, prioritize tasks, and resolve technical issues.

Responsibilities

Security, Compliance, and Disaster Recovery

• Ensure network security by following security standards in technology infrastructure maintenance, upgrades, and implementations
• Work with Sr. Security Engineer to respond to security incidents, coordinating activities with IT teams and vendors, and assisting end users, as needed
• Work with Sr. Security Engineer on DR, backup, and monitoring activities to meet the needs of Jhpiego enterprise business operations
• Participate in change management process for changes in software and hardware
• Follow and inform staff on Jhpiego IT Service Management processes

Securing Systems and Infrastructure

• Monitor systems to ensure security and performance of Jhpiego systems
• Manage and analyze network and system configurations
• Maintain network equipment including all switches, wireless access points, and firewalls
• Assist with system maintenance and vulnerability assessments

Incident and Change Management

• Respond to security incidents, escalating to Sr. Engineers as needed
• Manage and monitor Intune to deploy applications to user laptops
• Monitor system changes and triage incidents to resolution
• Follow the Incident and Change Management processes

Collaboration and Knowledge Sharing

• Work with Global IT teams to ensure network infrastructure meets standards across Jhpiego offices
• Share knowledge on Jhpiego’s infrastructure processes and procedures with Global IT teams
• Collaborate with IT staff on infrastructure solutions

Other duties as assigned

NOTE: All staff members of Jhpiego, regardless of the level of their responsibilities are expected to:

• Model the mission and values stated above
• Participate in the business development processes
• Contribute to the knowledge sharing and transfer process
• Make responsible decisions that result in time and cost containment and clear accountability
• Participate in multiple teams, adopt team spirit, take responsibility for action items assigned and provide feedback as needed
• Multitask, be able to manage competing priorities and be able to prioritize to meet program and/or organizational objectives

Required Qualifications

• BA or BS in computer science, engineering, mathematics, or cybersecurity with at least 4 years of experience in information technology with an emphasis on security
• Experience working with a SIEM in an enterprise environment
• Experience writing scripts or code in Python, Powershell, KQL, C#, Java, or any other language
• Experience responding to and resolving security incidents
• Experience providing remote support, working, and communicating with end-users
• Experience with using a ticketing system to manage tasks and incidents
• Strong knowledge of both high- and low-level network architecture, protocols, devices, and operating systems
• Experience with Azure, AWS, or GCP
• Experience with MDMs or configuration management systems
• Experience in subnetting, general network architecture, DNS, firewall, and intrusion detection/prevention
• Experience with Windows Server and Linux operating systems
• Experience or knowledge in Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols, etc.)
• Experience using some or all of the following: packet analysis, remote troubleshooting, network protocols, network diagnostic tools, and network monitoring tools.
• Industry regulated certifications: CEH, CISSP, Sec+, SANS
• Excellent client interfacing skills, strong verbal and written communication skills and ability to work with all levels of management
• Ability to manage high-volume workflow with minimal supervision
• Ability to coordinate tasks and deliverables with project team and vendors
• Ability to monitor and adhere to deadlines
• Consistent attention to detail
• Experience working with a diverse IT team
• Strong complex problem-solving skills
• Strong written and oral communication skills
• Ability to communicate technical information to a non-technical audience
• Ability to travel internationally up to 25%

Preferred Qualifications

PREFERRED Qualifications

• Experience with network infrastructure in locations with very low bandwidth
• Experience working with a global team with a flexible approach to working hours