At Cumming Group, you will work on some of the world's most exciting projects in a dynamic environment where your success is measured by the impact you make. We are one of the fastest-growing project and cost management consultancies in the United States, as reflected in our top 20 rankings in ENR. With over 50 offices globally, an extremely diverse project portfolio, and double-digit year-over-year revenue growth, the opportunities to make your mark are limitless!

The IT Security Analyst II will focus on day-to-day vulnerability and risk management within existing systems. Ensuring vulnerabilities are addressed, technical policies are applied to relevant systems, researching and responding to security incidents, and providing feedback to security leaders on identified risks and improvements.

Essential Duties & Responsibilities:

Respond to security incidents raised internally or escalated from MSSP.Provide root cause on security incidents and confirmed breaches.Monitor vulnerability systems and ensure vulnerabilities are mitigated directly, or though escalation to the appropriate administrator.Ensure Team Members systems are compliant with technical security policies. Regularly review infrastructure systems to ensure monitoring is active and security policies are properly applied.Identify gaps in existing security polices or controls and recommend mitigations to security leadership.Monitor and preform regular security testing with existing tools and ensure exploitable vulnerabilities are prioritized with appropriate administrators.Work with MSSP to ensure all systems are effectively monitored and reporting into SEIM.

Knowledge & Skills Required:

Knowledge of Cyber Security conceptsAnalytical skills and ability to distill large datasets into meaningful informationWorking knowledge of Microsoft Windows, networking and LinuxExperience with Microsoft Defender suite of security productsExperience with automated penetration testing systemsKnowledge of scripting – powershell, kql, etc.

Preferred Education and Experience:

Education: BS in IT or Computer Systems or equivalent years of work experience

Experience: 3+ years in a Security or related administrative role

Preferred Certification: Security+, Ethical Hacking, CompTIA CySA+, Microsoft Security Operations Analyst

Cumming Group provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.