Security Analyst

This role is a technical position that will focus on security operational tasks: monitoring, incident response, and ongoing administration of critical security platforms. The Information Security Team fosters a collaborative environment and is building a best of breed practice to partner with the business to protect the Firm’s information and computer systems.

The role is suited to individuals with prior experience working in security operations. The successful candidate must have hands-on technical experience in supporting infrastructure and information security platforms.  Millennium is a complex and robust technical environment and securing the Firm from external and internal threats is a top priority which makes this role very challenging.

Principal Responsibilities

• Respond to tickets generated from the monitoring and tracking of security events or other security related requests for services.
• Responsible for the daily operation of enterprise security systems including SIEM, IDS, Firewall, Web proxy, Endpoint Protection, Password Vault, custom monitoring events or general system health alerts as escalated by the Enterprise Command Center, etc.
• Participate in Information Security Incident Response activities for the Firm’s environment.
• Enforce security policies and procedures by administering and monitoring appropriate systems, events and answering client queries.
• Perform vulnerability scans and/or analyze results of scans and assist with remediation as required.
• Collaborate with the Information Security Team to deploy a suite of security tools including AV, Advanced Malware Detection, SIEM, IDS, Vulnerability scanners, etc.
• Ensure MLP enterprise security products are functioning and protecting the environment as expected while providing stability and maintaining policies and procedures.
• Develop and maintain documentation of all Security products including specific tools, technologies and processes.
• Develop and implement procedures and processes to automate repetitive tasks in order to focus resources on innovation and continuous improvement.
• Support the development and delivery of a comprehensive information security program for the entire Millennium organization.
• Actively monitor new and emerging security and privacy related technologies, trends, issues, and solutions and assess their applicability to Millennium key business initiatives and business strategies.
• Leverage collected Intelligence to improve success in defending Millennium against and responding to future attacks or intrusions.
• Perform periodic and on-demand system audits and vulnerability assessments of systems, internal applications and Cloud services to identify security vulnerabilities.
• Provide technical support to IT staff in the detection and resolution of security problems.

Qualifications/Skills Required

• Bachelor or Master Degree in Computer Science or Cyber Security with strong IT background.
• 3 years' experience working in a security analyst role, financial industry experience preferred.
• Possesses at least one security certification (Security+, OSCP, CISSP, CEH, GCIA, GCIH).
• Familiarity with use of ticketing systems to manage operational workload.
• Excellent understanding and experience working with data security solutions – including operating system, Active Directory, Web Proxy, PKI, Group Policy, DNS, Messaging, DLP and Cloud Security(AWS, GCP)
• Experience with vulnerability management scanning platforms.
• Ability to handle sensitive and/or confidential materials with appropriate discretion.
• High level understanding of internetworking, data transmission and encryption protocols.
• In-depth knowledge of Windows and Unix operating systems.
• Scripting, development and automation skills using Powershell, Python (Java Script, Rest or SOAP web services a plus).
• Possess a passion for Information Security and Technology.
• Experience in OSINT, Threat hunting and analyzing malicious emails
• Sound knowledge of file system access control (NTFS & Unix)
• Able to prioritize in a fast moving, high pressure, constantly changing environment
• Ability to communicate and collaborate across technology teams.