CATCH Intelligence is a Business Intelligence, Reporting, Analytics, and Data Warehouse consulting firm based in the Midwest. We help business transform raw data into information, information into knowledge, and knowledge into plans that drive profitable action!

　　We are currently looking for a Security Analyst to join our team!

　　Responsibilities consist of but are not limited to:

　　Monitor and analyze security events and incidents to identify threats and vulnerabilities.

　　Conduct security assessments and penetration testing to identify weaknesses in systems and applications.

　　Protects system by defining access privileges, control structures, and resources.

　　Recognizes problems by identifying abnormalities; reporting violations.

　　Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.

　　Recommend and champion security improvements and enhancements. Formulate, Prioritize, and Implement security standards in accordance with CIS, RSA, and NIST 800-53 controls.

　　Secure networks through firewalls, password protection and other systems.

　　Serve as a security expert and conduct trainings when needed.

　　Draft policies and guidelines.

　　Develop and maintain incident response plans and procedures.

　　Conduct reviews and insure security and compliance with HIPPA and data encryption standards.

　　Inspect hardware for vulnerable points of access.

　　Monitor network activity to identify issues early and communicate them to IT teams.

　　Act on privacy breaches and malware threats.

　　Use advanced tools to perform penetration, network/port, or packet testing to identify security threats.

　　Champion change management and work across multiple disciplines to improve security scores using a variety of tools and measures.

　　Required Skills consist of but are not limited to:

　　4 years of experience in the security field.

　　BS/BA in Cybersecurity, Computer Science, Information Technology or a related field

　　Familiarity with security frameworks (e.g. CIS, RSA, NIST Cybersecurity framework).

　　Knowledge of networking, patch management, firewalls and intrusion detection/prevention systems.

　　Creating and enforcing Information security policies and guidelines.

　　On-call network troubleshooting.

　　Strong knowledge of the Windows operating system.

　　Familiarity with network protocols and ports.

　　Experience in risk management and creating security documentation.

　　Excellent problem-solving and analytical skills.

　　Strong communication and collaboration abilities.

　　Nice to have skills include:

　　Professional certification (e.g. CompTIA Security+, CISSP, SANS GIAC/GCIA/GCIH, or CASP)

　　Experience with threat hunting and threat intelligence.

　　Knowledge of cloud security best practices (Azure, AWS, GCP).

　　Experience with scripting and automation using Powershell.

　　Experience with Microsoft Active Directory

　　Experience with security incident response tools and processes.

　　Knowledge of enterprise SIEM systems.

　　Knowledge of routers, hubs, and switches.

　　Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.

　　Hands-on experience with penetration, network/port scanning tools, and wire shark

　　Experience with Cisco, Dell, or Microsoft networking and security products

　　Understanding of Data Center principles and VMWare servers

　　Knowledge of OWASP best practices