"Alerted.org

Cyber Security Analyst ​ Legal & Administrative Services ​ Puerto Rico         General Responsibilities Responsible for monitoring and identifying threats to the organization's IT Infrastructure. Additionally, you will be responsible for assessing and investigating cybersecurity events, alerts or reports, and escalating to the incident management group when necessary. They will determine if the security event will be classified as an incident. They will coordinate with the client's IT and security team to resolve the security incident. Monitors security events, alerts, and reports in the security event monitoring system (SIEM) to detect violations of policies, procedures, controls, malicious activity, and/or indicators of compromise on systems. • Performs technical and non-technical reports of test results and investigations related to security alerts and events. • Presents the findings in a technical and non-technical way to the interested teams. • Analyzes information security events, alerts and reports and interprets the conclusions and their impact on the company. • Documents and develops operating manuals, standardized tests and system security evaluation methodologies. • Answer customer calls to manage NAC unlocks or exceptions or other security services. • Collaborates in the investigation of security breaches with the incident management team. • Assists in root cause investigation of suspicious infrastructure events. • Prepares reports and updates department metrics for internal control of events. • Evaluates the existence of unauthorized applications on the company's systems. • Interprets security events on systems such as, but not limited to: AS/400, IPS, NAC, Windows, Unix/Linux, Tandem/HP Nonstop, IBM ZOS, FTP, Databases (SQL, DB2, Oracle), Firewall, DLP and others. • Coordinates with the areas involved in the Evertec regions for the timely attention of a Security event so that the respective documentation of the event is obtained. • Ensures execution of all key controls including but not limited to SOX controls for role as per assigned roles within established procedures and within approved delegation of authority and authorized limits. Responds to and reviews all escalations or deviations that may be brought to his or her attention. Reports any exceptions to established internal controls and documents any employee.     Performs duties through methods and actions that are consistently ethical and in total compliance with the laws, applicable regulations, Code of Ethics, corporate policies and guidelines and rules of conduct. Completes corporate trainings and certifications intended for the detection and prevention of money laundering related activities and fraud, insider training and conflict of interest policies and procedures, as applicable.   Education and Experience Required Bachelor's degree (B. A.) in Computer Science or related fields. Experience One (1) to two (2) years of experience in Information Technology.     Knowledge and Skills Required Documentation Ability to create and maintain clear and accurate documentation on technological systems and processes. Organizes information in a structured way for different audiences, using different tools to develop manuals, user guides and technical specifications, facilitating the transfer of knowledge and/or promoting consistency in the development and maintenance of technological solutions. Evertec Group, LLC is an Equal Employment Opportunity Employer, Minorities/Females/Veterans/Disabled Rev. April 2024 Mastery of Computer Security Understanding of the fundamental principles of computer security, including encryption, authentication, access control, firewall, intrusion detection, forensic analysis, among others, as well as familiarity with operating systems, databases, and business applications. Cloud Security Standards Demonstrating a solid and up-to-date knowledge of relevant security standards and frameworks for cloud environments, such as PCI-DSS, NIST, MITRE ATT&CK, OWASP, CIS, among others. This knowledge enables the design and implementation of robust security practices aligned with industry best norms and recommendations. Risk Management Ability to identify, assess, and prioritize potential risks, followed by the implementation of strategies to minimize their impact. This includes identifying potential risks, analyzing them qualitatively and quantitatively, planning responses (such as avoiding, mitigating, or accepting risks), and ongoing monitoring. Technical Security Management Ability to implement, manage, and monitor security controls, including the configuration and maintenance of solutions such as firewalls, ISMS, antivirus, and ATP, as well as the detection and alerting of vulnerabilities and threats. Technical Support and Query Resolution Ability to provide effective technical support and assistance to users, technical teams, peers, and management in identifying and resolving issues related to systems or software. This includes timely management of cases and incidents, addressing technical inquiries, tracking requests, and contributing to new projects or investigations, ensuring clear guidance and appropriate solutions to meet the needs of the client or organization.     Additional Information Lunes a viernes 9am-6pm.   Available to work extended hours, weekends and/or holidays as needed and the availability to travel as required supporting projects in the region.   “Evertec Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, pregnancy, marriage, sexual orientation, gender identity, national origin, age, genetic information or condition, political affiliation, religious ideology, being a victim or perceived victim of domestic violence, sexual assault, or harassment, serving or having served in the Armed Forces of the United States, disability status, or any other protected category by Puerto Rico or US Federal law. EEO is the Law Poster . If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, please contact the People & Culture Department in advance at (787) 759-9999 or send an email to [email protected] in order to accommodate your special needs. Evertec is an employer with E-Verify to verify the eligibility for employment of all the new employees. Participation Poster . Drug-free company. Equal Employment Opportunity/ Affirmative Action for Women/Veterans/People with Disabilities.”