Job Opportunities API

O.C. Tanner is the global leader in software and services that improve workplace culture through meaningful employee experiences. Our Culture Cloud is a suite of apps designed to enhance the employee experience with strategic recognition, service awards, wellbeing, leadership, and events that help people thrive at work. Our Culture by Design approach provides expert services to organizations looking to create great workplaces. Our global team of 1,500 people hail from 58 countries and speak 62 languages. As programmers, researchers, designers, client professionals and craftspeople we create the tech, tools and awards that connect employees to purpose at thousands of companies. Join us as we help people all over the world thrive at work. Summary: The primary purpose of this position is to help coordinate and report on cyber incidents   impacting   clients .    This position will complete tasks and projects designed to ensure security of the organization’s systems and infrastructure assets.   An Information Security Analyst   p rotects against unauthorized access, modification, or destruction.   This role w orks with end users to   determine   needs   of individual departments,   implements   policies or procedures, and tracks awareness and training through the organization. Duties: • Conduct i nvestigation,   assess   impact, and analy ze   security incidents . • Make   decisions   regarding   risk and measures for computer and network security. • Experience in designing, developing, and   maintaining   RESTful APIs. • Assist   in the d evelopment and implementation of the system-wide incident response and handling program. • Internally assess, evaluate ,   and make recommendations to management   regarding   the company’s incident response capabilities. • Ability to integrate third-party APIs and services into existing applications . • Provide Incident Response (IR) support when analysis confirms actionable   incident . • Provide threat and vulnerability analysis as well as security advisory services . • Analyze and respond to previously undisclosed software and hardware vulnerabilities . • Investigate, document, and report on information security issues and emerging trends. • Proficiency   in using log query languages (e.g., SQL, KQL, Splunk SPL) to analyze and interpret log data. • Communicate with site personnel about security awareness and develop security awareness materials . • A ssess computer hardware, software, and systems for security risks or violations and work with ITS and campus staff and technology vendors to recommend solutions. • Develop strategies to address awareness and training for all stakeholders as well as technical solutions. • Other duties as assigned. Requirements : • Knowledge of information security risk management frameworks and compliance practices. • Understanding   of securing network technologies, client, and server operating systems. • Ability to develop security standards and guidelines based on best practices and industry standards . • Skills to r espond to, analyz e , and communicat e   information security incidents . • Excellent interpersonal, communication, and presentation skills, including formal report writing . • W ell versed in incident response frameworks and methodologies . Preferred  Qualifications: • Skills in project management, documenting risk, and compliance activities . • Ability to integrate third-party APIs and services into existing applications. • Strong troubleshooting skills to diagnose and resolve issues using log queries. Experience & Education: • 1-2   y ears of experience with advanced IT skills and information security experience and   expertise . • Bachelor’s degree in information technology or related field   preferred . • Information security related training or certifications, such as   CIRT   and C ISSP , or GCIH preferred .