Information Security Senior Analyst

Job Description:

Essential Job Functions:

• Assist in security assessments, audits, and vulnerability scans, providing detailed reports and recommendations.
• Monitor security events and incidents, escalating and responding to threats as necessary.
• Support policy implementation, ensuring that security policies are understood and followed.
• Collaborate with the security team to maintain and update security documentation.
• Contribute to incident response activities, assisting with investigations and documenting findings.
• Provide input into security strategy and risk management processes.
• Stay informed about security trends and best practices.
• Contribute to security awareness training for employees.

Basic Qualifications:

• Bachelor's degree in a relevant field or equivalent combination of education and experience
• Typically, 5+ years of relevant work experience in industry, with a minimum of 3 years in a similar role
• Proven experience in information security analysis
• Proficiencies in security technologies and risk assessment
• A continuous learner that stays abreast with industry knowledge and technology

Other Qualifications:

• Advanced degree in a relevant field is a plus
• Relevant certifications such as CompTIA Security+, CEH, or equivalent are a plus
• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate are a plus.

Required/Minimum Skillset: 

• Foundational knowledge of IT, Cloud, and industry security practices
• Familiarity and knowledge of industry RBAC, Zero Trust and Least Privilege security models and practices
• Hands on experience with Entra ID and management tools
• Hands on experience with Azure and management tools
• Hands on experience with Microsoft Entra ID and Azure RBAC configurations
• Basic knowledge of waterfall and Agile project management methodologies
• Medium or Large size environment experience (Both project and Hands On)
• Microsoft Entra ID, B2B and B2C tenant management experience
• Hands on experience with Microsoft Authentication methods and MFA
• Hands on experience with Microsoft Privilege Identity Management (PIM) roles and security rule enforcement
• Compliance to request SLA’s

Optional Skillset:

• Fundamental knowledge of Microsoft Azure 
• Fundamental knowledge of Application security
• Fundamental knowledge of Network, firewall and DNS
• Good trouble-shooting and analytical skills
• Fundamental knowledge of PowerShell scripts
• Ability to perform and document RCA
• Architectural knowledge of Entra ID and Azure
• Architectural knowledge of cloud technologies and security
• Architectural knowledge of Cloud and on-premises technology integration

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.