
Senior Analyst IT Information Security
- Pennsylvania
- $88,500-147,600 per year
- Permanent
- Full-time
- Collaborate with Information Technology workgroups to ensure effective configuration, deployment, and administration of information security related systems. Design threat hunting plans and activities. Develop and implement best practices, policy and rule-based controls, threat intelligence feeds, and related work-flows and procedures for all information security systems. Leverage new and existing tools and techniques to improve process efficiency and effectiveness. Maintain job-aid and other process documentation to ensure up-to-date and consistent performance of key security-related business processes.
- Research, diagnose, and troubleshoot technical and security events associated with internally-detected or user-reported incidents and management requests. Perform threat hunting exercises. Maintain appropriate evidence and documentation to support due care requirements of incident investigations. Assist with development of Information Security related policies, procedures, guidelines and standards. Assist with development of security awareness and advisory content for corporate compliance training and periodic departmental educational publications.
- Advise and assist IT staff with meeting business line technology and data needs in alignment with corporate risk management principles and requirements in relation to Information Security.
- Monitor alerting and reporting generated as part of established internal controls to identify potential security concerns as well as potential violations of information security policies, procedures, and best practices. Perform monitoring and incident response functions in a consistent, repeatable manner to effectively support controls defined and managed within the IT Governance unit.
- Provide timely and accurate reporting to ISO management, the CISO, and Fulton Financial Corporation management concerning the effectiveness of the Information Security program and related systems. Collect, compile, and communicate threat intelligence information in a manner appropriate for the target audience.