Job Description:
Analyst will be responsible for ongoing monitoring and reporting of security incidents along with projects and tasks associated with security and compliance. Must be able to effectively evaluate technical security controls in place and requires some hands on experience in cyber security monitoring. Analyst should have understanding of information security engineering processes, architecture methodologies, industry best practices and governance models (SANS, SAMM, COBIT, etc) and generally accepted security principles.
Performing regular risk, threat, vendor and vulnerability assessments.
Conduct security reviews of infrastructure, applications and policies.
Operational knowledge of system and network security engineering best practices.
Demonstrate the ability to understand Information Security guidelines, Policies and Procedures.
Understanding of the business and the ability to assess and address risk without negatively impacting the business.
Initiating and ensuring the implementation of projects to strengthen information security controls and to meet regulations.
Participate in the improvement and development of process/procedure manuals and documentation.
Experience with working in a team setting, able to take direction well, detail oriented and have a good understanding of information security from concept, design to implementation and monitoring.
Qualifications
Bachelor's Degree, preferably in Computer Science
Strong written and verbal communication skills as well as a dynamic, creative personality.
Highly organized approach to projects. Project management experience a plus.
Requires the ability to work under pressure in a fast-paced environment and be able to multi-task effectively.
Ability to work on weekends and after-hours as necessary.
Ability to work effectively as part of a team and also to work independently as and when required.
Ability to show initiative and take on new tasks as assigned.
Optional extras
Ever had OSSEC/OSSIM/SIEM Experience?
Are you comfortable with creation and understanding of Snort rules?
Do you have regex and/or Shell scripting ability?
Can you disect a pcap?
Automation of Security Testing Tools within a CI/CD release management framework
J2W:DIC
Company Information: The New York Times Company (NYSE: NYT) is a global media organization dedicated to enhancing society by creating, collecting and distributing high-quality news and information. The company includes The New York Times, International New York Times, NYTimes.com, INYT.com and related properties. It is known globally for excellence in its journalism, and innovation in its print and digital storytelling and its business model. Follow news about the company at @NYTimesComm.
EEO Statement: The New York Times Company is an equal employment opportunity employer, and does not discriminate on the basis of race, color, religion, gender, sexual orientation, marital status, age, disability, national origin, citizenship or any other protected characteristic. The New York Times Company is committed to diversity in its most inclusive sense.
Analyst will be responsible for ongoing monitoring and reporting of security incidents along with projects and tasks associated with security and compliance. Must be able to effectively evaluate technical security controls in place and requires some hands on experience in cyber security monitoring. Analyst should have understanding of information security engineering processes, architecture methodologies, industry best practices and governance models (SANS, SAMM, COBIT, etc) and generally accepted security principles.
Performing regular risk, threat, vendor and vulnerability assessments.
Conduct security reviews of infrastructure, applications and policies.
Operational knowledge of system and network security engineering best practices.
Demonstrate the ability to understand Information Security guidelines, Policies and Procedures.
Understanding of the business and the ability to assess and address risk without negatively impacting the business.
Initiating and ensuring the implementation of projects to strengthen information security controls and to meet regulations.
Participate in the improvement and development of process/procedure manuals and documentation.
Experience with working in a team setting, able to take direction well, detail oriented and have a good understanding of information security from concept, design to implementation and monitoring.
Qualifications
Bachelor's Degree, preferably in Computer Science
Strong written and verbal communication skills as well as a dynamic, creative personality.
Highly organized approach to projects. Project management experience a plus.
Requires the ability to work under pressure in a fast-paced environment and be able to multi-task effectively.
Ability to work on weekends and after-hours as necessary.
Ability to work effectively as part of a team and also to work independently as and when required.
Ability to show initiative and take on new tasks as assigned.
Optional extras
Ever had OSSEC/OSSIM/SIEM Experience?
Are you comfortable with creation and understanding of Snort rules?
Do you have regex and/or Shell scripting ability?
Can you disect a pcap?
Automation of Security Testing Tools within a CI/CD release management framework
J2W:DIC
Company Information: The New York Times Company (NYSE: NYT) is a global media organization dedicated to enhancing society by creating, collecting and distributing high-quality news and information. The company includes The New York Times, International New York Times, NYTimes.com, INYT.com and related properties. It is known globally for excellence in its journalism, and innovation in its print and digital storytelling and its business model. Follow news about the company at @NYTimesComm.
EEO Statement: The New York Times Company is an equal employment opportunity employer, and does not discriminate on the basis of race, color, religion, gender, sexual orientation, marital status, age, disability, national origin, citizenship or any other protected characteristic. The New York Times Company is committed to diversity in its most inclusive sense.