Information Security Analyst

 GLOTECH, Inc., founded in 1995, is a privately and minority-owned company serving military, federal and commercial clients.  We are a successful Information Technology firm with a large staff currently providing superior information technology and advanced engineering services around the world. Our success is built on attracting and retaining quality staff through a highly competitive benefits package with a special focus on continuing career development and corporate financial support. We also maintain a collegial working environment and offer our staff opportunities to improve and enhance their skills.

GLOTECH is committed to a comprehensive employee benefits program that helps our employees stay healthy, feel secure and maintain a work/life balance. We provide medical dental and vision care, disability insurance (short and long term), Life & AD&D Insurance, Flexible Spending Accounts (Healthcare, Dependent Care and Commuter Transportation and Parking Reimbursement), and Employee Assistance Programs. Additionally, we provide Annual Leave, Sick Leave, Holiday Pay, Educational Assistance, Certification /Training Reimbursement, and a 401(k)-retirement savings contribution plan (with employer match).

This is a talent pipeline opening.  We are building a network of qualified talent for general consideration of future full time or temporary Information Security Analyst job openings. 

GLOTECH, Inc. is seeking an Information Security Analyst to support the corporate office of United Parks & Resorts located in Orlando, Florida.

The Information Security Analyst performs IT Security operations activities, including incident response, vulnerability scanning, network traffic monitoring, threat and endpoint monitoring, malware analysis and security technology planning.  Assists in the development of tactics, techniques and procedures to quickly detect and resolve anomalous events and evolving threats throughout the environment.  Conducts triage on detected security events for severity analysis and potential scope of compromise for remediation or escalation. Participates in ongoing process improvement and security awareness initiatives. 

• Reviews and analyzes network traffic and threat logs to identify and detect intrusions, anomalous conditions, scanning activities, and security violations within the company’s environment and at enterprise perimeters.
• Research and maintain proficiency in open source and commercial exploitation tools; develop and implement scripts, tools and techniques to automate exploit prevention, detection and response
• Performs event and Incident Investigations and Forensic Analysis to determine root cause and identify Indicators of Compromise for threat intelligence additions
• Reviews new and ongoing threat intelligence reports for applicability within the environment and update internal watch lists for monitoring and alerting within the SIEM.
• Analyze completed vulnerability and compliance scans, report any missing devices or network subnets with absent or incomplete scan results for resolution. Creates and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems
• Develops documentation to support security systems maintenance and operations; Event and Incident Response Playbooks; Penetration Test Reports
• Writing and Presenting routine reports of Event investigations and IR
• Implements technical solutions based on best practices to fulfill contractual, regulatory, and legal requirements
• Aids in developing technical user impact statements and conducts security and awareness training activities.
• Travel and non-business hour work may be required

• Bachelor’s degree in computer science or related area from four-year College or University; or a minimum of five (5) years related experience and/or training; or equivalent combination of education and experience.
• Certification in one or more of the following areas desirable: CISSP, CEH, GCIH, GCIA, GCFA
• Experience with networks and information security with a proven track record of success.
• Experience and detailed technical knowledge in security engineering, system application and network security, authentication and security protocols, and cryptography.
• Experience performing hands-on security support for a wide range of technologies including, but not limited to: SEIM, IDS/IPS, HIDS, malware analysis and protection, content filtering, logical access controls, identity and access management, and data loss prevention, content filtering technologies, application firewalls, vulnerability scanners, Active Directory/LDAP, forensics software, security incident response, identity management
• Understanding of advanced network and security platforms and tools such as firewalls, IDS/IPS, SIEM, DLP, multifactor authentication, and encryption.
• Experience in Virus, malware, and root kit prevention, identification, and clean up.
• Excellent organizational skills, including the ability to multi-task, focus on detail, set priorities, and work independently.
• Hybrid schedule, with availability to work onsite in Orlando, FL as needed.

Preferred Skills

• Ability to work with minimal supervision in a high-pressure environment
• Ability to rapidly resolve issues and recognize when escalation is necessary
• Ability to analyze complex business/technical data and develop innovative solutions
• Experience with Logrythym SEIM platform, McAfee endpoint security products, and Microsoft Defender ATP.
• Experience with cloud data platforms such as Google Cloud Platform, Amazon Web Services, and Microsoft Azure
• Previous theme park or hospitality experience

GLOTECH, Inc. is an Equal Opportunity/Affirmative Action Employer - Minorities/Females/Protected Veterans/Individuals with Disabilities.