Day & Zimmermann is a century-old company that focuses on innovation in various sectors including security and defense. The Analyst, Corporate Cybersecurity I will be an entry-level member of the cybersecurity team, responsible for executing and maintaining the corporate cybersecurity program while enforcing security policies to protect enterprise systems and data.

Responsibilities

• Leverage internally developed and third-party security solutions to monitor the security and availability of enterprise computing environments. Review logs and analyze output from the Security Information and Event Management (SIEM) system and other cybersecurity-owned platforms. Perform daily preventive and remediation maintenance activities. Participate in internal and external audits related to corporate IT systems, security plans, and policies. 40%
• Utilize internally developed and third-party security solutions to identify security gaps and threats within the environment. Enhance security visibility by identifying additional data elements to collect from systems and developing processes to leverage that data effectively. Analyze findings from multiple data sources — including trend analysis, automated scanning, and manual testing — to identify security flaws and misconfigurations. 30%
• Participate in security initiatives — ranging from large-scale projects to targeted tasks — aimed at improving the overall security posture of the organization's computing environment. Collaborate with other IT functional groups and core business units to implement, maintain, and enforce the corporate information security program. 10%
• Serve as a key contributor to incident response planning, testing, investigation, and remediation efforts. Analyze security incidents in a timely manner to determine whether formal response execution and escalation are required, and coordinate with the broader Cybersecurity team throughout the response lifecycle. 10%
• Develop and maintain documentation for operational security policies, processes, and procedures. Create and update standards for data access, protection, and backup to ensure consistent and compliant security practices across the organization. 10%

Skills

• 0-2 or more years experience in information technology, Internship or Co-Op in an information security or related position
• Familiarity with various information technology topics including core Internet and network technologies, i.e., TCP/IP, DNS, DHCP, HTTP/S, SMTP/S, etc
• Experience with configuring, administering, and troubleshooting operating systems, including UNIX, Linux, Windows, and iOS
• Good understanding of cybersecurity tools and the sources available to conduct cyber security alerting, analysis, and enhanced situational awareness
• Experience with network vulnerability assessments and penetration testing, and cybersecurity evaluation and testing tools
• Ability to follow documented procedures, create and update documentation, strong oral and written communication skills to work through tasks with other information technology professionals and customers within our businesses
• Knowledge of operational security topics including access controls, change management, data privacy & classification, logging & monitoring, security awareness, and security awareness
• Project and task management capabilities, organizational skills, and change management abilities
• Visual acuity (e.g., needed to prepare and analyze data, to transcribe documents, to view a computer, to read, to inspect objects, to operate machinery)
• Manual Dexterity (e.g., picking, pinching, typing, or other working that uses the fingers)
• Grasping (e.g., use of hand to apply pressure)
• Capacity to think, concentrate and focus over long periods of time
• Ability to write complex documents in the English language
• Ability to read complex documents in English language
• Capacity to express thoughts orally (e.g., accurately, quick and loudly convey spoken instructions to workers)
• Ability to regularly perform all job functions at Company's office or work site O/C (Often/ Critical)
• Bachelor's Degree in Arts/Sciences (BA/BS) in a related field
• Hands on experience with enterprise Microsoft technologies such as Active Directory, Group Policy, MSSQL, IIS, and Exchange are preferred
• Experience with cyber incident forensics a plus
• Knowledge of a variety of security protocols and topics to include: SSL/TLS, SSH, hashing and encryption algorithms, PKI, multi-factor authentication technologies, penetration test tactics and methodologies, scripting and automation with PowerShell, Python and other tools

Company Overview