Security Analyst
Purpose / Profile
As a Security Analyst at MillerKnoll, you will help reduce enterprise risk by safeguarding the organization’s digital assets from cyber threats. You will work closely with the Security Operations Center to continuously monitor, analyze, and respond to security alerts and events. You will collaborate directly with the greater Information Security team to ensure compliance with industry regulations, standards, and best practices, as well as educate employees on proper cyber hygiene. You will help guarantee the confidentiality, integrity, and availability of the organization’s network and compute resources and aid in shaping strategies to reduce cyber risk.
Essential Functions
- Provide timely detection and identification of possible attacks/intrusions and distinguish findings from benign activities.
- Correlate incident data to identify specific vulnerabilities and make recommendations that enable prompt containment and remediation.
- Coordinate with the greater organization to resolve cyber incidents.
- Provide technical summaries of findings in accordance with established reporting procedures.
- Escalate and triage incidents that may cause an immediate impact to the organization.
- Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats.
- Perform event correlation to gain situational awareness and to determine the effectiveness of an observed attack.
- Assist in the development and implementation of security policies and procedures.
- Track and document cyber incidents from initial detection through final resolution.
- Assist in reducing risk by actively identify areas of non-compliance and making recommendations for improvement.
- Stay current with cybersecurity news and trends relevant to the business and industry.
- Participate in the information security on-call rotation, providing emergency support for security-related incidents.
- Provide input into the development of security policies and procedures.
- Interface with other business units such as Governance, Risk, and Compliance to communicate program status and overall security posture.
- Promote a positive security culture through knowledge sharing, influences, and conduct.
- Create and maintain role-specific documentation.
- Participate in the Change Advisory Board (CAB).
- Knowledge of system administration concepts for operating systems such as Unix/Linux, IOS, Android, and Windows operating systems.
- Knowledge of cloud service models and cloud security best practices.
- Knowledge of procedures used for documenting and querying reported incidents, problems, and events.
- Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
- Knowledge of auditing and logging procedures (including server-based logging).
- Knowledge of common software applications and their associated vulnerabilities.
- Knowledge of host-based security products and how they reduce exploitation.
- Knowledge of approach, strategy, and structure of exploitation tools (e.g., sniffers, keyloggers) and techniques (e.g., gaining backdoor access, collecting/exfiltrating data, conducting vulnerability analysis).
- Knowledge of what constitutes a “threat” to a network.
- Skill of identifying, capturing, containing, and reporting malware.
- Skill in using incident handling methodologies.
- Skill in using security event correlation tools.
- Skill in developing analytic approaches to problems and situations for which information is incomplete or where no precedent exists.
- Ability to identify unusual activity amongst a defined baseline.
- Bachelor in Computer Science, Information Systems, Cybersecurity, or Software Engineering.
- 3+ years of relevant experience in cybersecurity or information technology.
- 2+ years of hands-on experience with an EDR/XDR solution, SEG, and SIEM.
- Experienced in a scripting language such as Python, PowerShell, or VBA.
- One or more technical or cybersecurity certification preferred (e.g., CISA, CCSP, CRISC, CEH, Security+, GSEC, SSCP)
A starting compensation range for this role is $68,550.00 - $85,725.00. Relevant salary considerations will include candidate qualifications and experience, other business/organizational needs and market factors . You may also be eligible to receive a geographic premium, annual discretionary incentive and equity awards which are subject to the rules governing these programs. The company offers a full spectrum of benefits including Medical, Prescription Drug, Dental, Vision, Health Savings Account, Dependent Day Care Savings Account, Life Insurance, Disability and Other Insurance Plans, Paid Time Off (including Vacation and Parental Leave), Holidays, 401(k), and Short/Long Term Disability, in addition to other special perks reserved for our associates.
This organization participates in E-Verify Employment Eligibility Verification. In general, MillerKnoll positions are closed within 45 days and are open for applications for a minimum of 5 days. We encourage our prospective candidates to submit their application(s) expediently so as not to miss out on our opportunities. We frequently post new opportunities and encourage prospective candidates to check back often for new postings.
MillerKnoll complies with applicable disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact MillerKnoll Talent Acquisition at careers_help@millerknoll.com.