Information Security Analyst

Squarepoint is seeking an Information Security Analyst to join the Security Operations team. The Information Security Analyst provides first line of support for security inquiries, manages vulnerability assessments, assesses third-party vendors and software requests, and investigates and responds to security alerts. The ideal candidate has a strong technical foundation, problem-solving skills, and a passion for cybersecurity.

Responsibilities:

• Serve as the first point of contact for security-related questions and provide initial support.
• Identify, track, and coordinate remediation of security vulnerabilities.
• Assess third-party vendors and software for security risks before approval.
• Investigate and respond to security alerts.
• Collaborate with other security sub-teams on projects to enhance security capabilities, gaining exposure and growth opportunities.

Required Qualifications:

• No prior work experience required, but a strong interest in information security and relevant technical skills are required.
• Degree in Engineering, Computer Science, or STEM related field.
• Strong analytical skills and attention to detail.
• Effective communication skills to work with technical and non-technical teams.
• Familiarity with common attack techniques and emerging security trends.
• Exposure to security frameworks and industry best practices (such as NIST CSF, CIS Critical Security Controls).
• Awareness of common cryptographic principles and algorithms, including encryption, hashing, and key exchange methods.
• Understanding of key network protocols, including DNS, HTTP, TLS, SSH, TCP, UDP, ARP, IP, and IPSec.
• Understanding of stateful and stateless firewalls and how they control network traffic.
• Basic scripting skills in languages like Python or PowerShell for automating security tasks and analysis.

Nice to have:

• 1-2 years of exposure to security operations or a relevant IT role.
• Experience with security tools such as EDR, SIEM, firewalls, and vulnerability scanning tools.
• Knowledge of cloud security concepts and practices.
• Solid understanding of Windows and Linux systems security.
• Exposure to penetration testing techniques, tools, and methodologies.
• Relevant security certifications (e.g., Security+, CEH, OSCP).

#J-18808-Ljbffr