Specialist, Network Security Analyst

Description

The role sits in the Network Security Strategy and Analysis team, part of the ISO Infrastructure Security group, at a large financial services firm with a strong digital transformation focus.

The team uses network, security, asset, configuration and vulnerability data to find risk, measure technical debt, judge control effectiveness and guide network security decisions.

The role does not run day-to-day administration or operations of network security platforms. The work is analysis that drives environmental hardening and risk reduction.

Success depends on technical depth, strategic thinking, sound analytical judgment and leading work through influence across several teams.

Responsibilities

• Collect, normalize, correlate and analyze data from SIEM, firewall, proxy, ZTNA, NAC, network, vulnerability, asset, CMDB, IPAM, endpoint and identity sources.
• Find unmanaged assets, insecure access paths, legacy technologies, control gaps, configuration weaknesses, segmentation problems and other network security technical debt.
• Build repeatable queries, dashboards and reports that track network security posture, exposure, control coverage, risk-reduction progress and data quality.
• Carry out complex analysis largely on your own, documenting methods, assumptions, limitations, validation steps and recommended actions.
• Work with network, infrastructure, application, cloud, identity and security teams to validate findings, resolve data discrepancies and set up accountable remediation plans.
• Support current-state assessments and strategy work for NAC, segmentation, Zero Trust, ZTNA, firewall modernization, proxy transformation and related capabilities.
• Turn findings into short risk statements, decision-ready summaries, visuals and presentations for technical and leadership audiences.
• Keep a network security risk and technical-debt inventory covering evidence, ownership, priority, dependencies, status and risk acceptance.
• Automate recurring data preparation, quality checks, correlation and reporting where practical, and keep clear process and query documentation.
• Refine analytical methods, data sources, metrics and validation steps based on stakeholder feedback and changing risk priorities.

Requirements

• A bachelor's degree in computer science, engineering, information technology, cybersecurity, data analytics or a related field, or equivalent experience.
• Applied experience in cybersecurity, network engineering, security analytics, risk analysis or a related technical field.
• Strong analytical and problem-solving skills, including working with incomplete or inconsistent enterprise data and reaching defensible conclusions.
• Experience building queries, dashboards, metrics or reports from security and technology data.
• Ability to manage assigned analysis and project work independently, escalating material risks, blockers and data-quality issues at the right time.
• Working knowledge of business concepts, information security tools and processes needed to make sound decisions in the company context.
• Experience working in agile teams spread across locations and functions.
• Strong written and verbal communication, presentation, documentation and collaboration skills.
• Applied experience with several of the following: Splunk or a comparable SIEM or analytics platform, including search development, field normalization, lookups, dashboards and scheduled reports.
• Applied experience with several of the following: SQL, Python, PowerShell or comparable tools for data manipulation, correlation, automation and quality checks.
• Applied experience with several of the following: firewall, proxy, ZTNA, NAC, DNS, flow, routing, switching, authentication and remote-access telemetry, including Zscaler data where relevant.
• Applied experience with several of the following: asset inventories, CMDB, IPAM, endpoint management, identity, vulnerability management and ServiceNow data.
• Applied experience with several of the following: IP addressing, subnets, VLANs, routing, ACLs, firewall policy, NAT, segmentation and application connectivity.
• Applied experience with several of the following: information security risk assessments, control testing, issue management, exception processes and technical-debt tracking.
• Applied experience with several of the following: NIST and ISO 27000 standards, CIS Controls, Zero Trust concepts and information security control standards and engineering specifications.
• Applied experience with several of the following: data visualization, KPI and KRI design, trend analysis, executive reporting and measuring control effectiveness and remediation outcomes.
• Preferred: security, networking, analytics, cloud, Splunk, Zscaler or GIAC certification.
• Preferred: experience analyzing data in a large enterprise with several network and security platforms.
• Preferred: experience supporting network segmentation, NAC, Zero Trust, firewall-rule analysis or technical-debt reduction work.

Conditions

The posting does not state a work model, office location or schedule.

Equal opportunity applies to all candidates.

Benefits

• The base salary range is $89,000.00 to $147,000.00. Actual pay may vary within that range based on location, candidate experience and skills.
• Market-competitive base salary with yearly bonus potential at every level.
• Discretionary annual incentive program. Awards, if any, depend on individual and organizational performance and program rules.
• Medical, dental, vision, life and disability insurance, paid time off, and leave such as parental and military leave.
• 401(k) plan with a company match of up to 4%.
• Company-funded pension plan.
• Wellness reimbursement of up to $1,600 a year for items supporting personal wellbeing.
• Work/life resources covering topics such as parenting, housing, senior care, finances, pets, legal matters, education, mental health and career development.
• Education benefit to help finance traditional college enrollment toward an approved degree and many accredited certificate programs.
• Employee stock purchase plan: shares bought at 85% of the lower of the price at the start or end of the purchase period.
• Some benefits may not apply to part-time employees scheduled for fewer than 20 hours per week.