POSITION SUMMARY:

Job Title: Security Analyst

The Security Analyst- will join DigiCert’s crusade in delivering world-class Cyber Trust capabilities, continuously advancing global security operations by building programs to further strengthen DigiCert’s Security hygiene posture as well as activities to continuously protect against and evolve crisis response functions.

This exciting opportunity empowers strategic collaboration, joining forces across multiple business areas, and designing scalable systems to achieve DigiCert’s common vision.

Job Summary:

We are seeking a detail-oriented and experienced Security Analyst to join our cybersecurity team. The ideal candidate will have a solid understanding of cyber threat landscapes and the ability to analyze and mitigate risks. This role involves monitoring our networks for security breaches, investigating security incidents, and implementing protective measures.

Key Responsibilities:

• Monitor security access and perform security audits on our systems.
• Analyze security breaches to identify the root cause.
• Implement and maintain security measures and controls.
• Regularly update the company’s incident response and disaster recovery plans.
• Verify the security of third-party vendors and collaborate with them to meet security requirements.
• Conduct risk assessments and data processing analyses.
• Recommend and install appropriate security tools and countermeasures.
• Develop company-wide best practices for IT security.
• Perform penetration testing.
• Help colleagues install security software and understand information security management.
• Research security enhancements and make recommendations to management.
• Stay up-to-date on information technology trends and security standards.
• Lead and manage security incident response activities, including identification, containment, eradication, and recovery processes.
• Develop and oversee physical security strategies and protocols to safeguard facilities and assets.
• Provide support during security audits, ensuring compliance with industry standards and regulatory requirements.
• Manage multiple security projects, ensuring they align with organizational goals and are delivered on time and within budget.
• Collaborate with various departments to integrate security practices into broader company operations.
• Develop and maintain security policies, procedures, and documentation.
• Facilitate training sessions for staff on security protocols and awareness.
• Stay abreast of the latest security trends, technologies, and threats.
• Drive and support security identified remediation efforts.
• Foster and promote a security-forward culture.
• Mentor junior team members.
• Other duties and responsibilities, as assigned.

REQUIRED QUALIFICATIONS

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
• Professional security certifications such as CISSP, OSCP, CEH, or equivalent are highly desirable.
• Proven work experience as a Security Analyst or similar role.
• Experience with various security tools and products (Tanium, Crowdstrike, zScaler, Imperva, Tenable, etc.).
• Minimum of 5 years of experience in cybersecurity, with a focus on web application security and secure SDLC.
• Strong understanding of security protocols, cryptography, authentication, authorization, and security vulnerabilities.
• Experience with programming/scripting languages such as JavaScript, Python, Java, or similar.
• Excellent communication skills with the ability to engage technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities, with meticulous attention to detail.
• Programming: Python, Bash, PowerShell, JavaScript
• Must have experience working in Threat Detection and Incident Response
• Advanced level of knowledge of Information Security design concepts and principles
• Good understanding of the latest networking technologies and security methods.
• Excellent analytical skills and a strong sense of urgency for problem escalation.
• Ability to educate a non-technical audience about various security measures.
• Effective verbal and written communication skills.

#LI-LV1