Information Security Analyst

Who we are...

Verra Mobility is a global leader in smart mobility. We develop technology-enabled solutions that help the world move safely and easily. We are fostering the development of safe cities, working with police departments and municipalities to install over 4,000 red-light, speed, and school bus stop arm safety cameras across North America. We are also creating smart roadways, serving the world's largest commercial fleets and rental car companies to manage tolling transactions and violations for over 8.5 million vehicles. And we are a leading provider of connected systems, processing nearly 165 million transactions each year across 50+ individual tolling authorities. 

Culture 

Verra Mobility Corporation is a rapidly-growing, entrepreneurial company that operates with a people-first philosophy and approach. The company lives by its core values—Do What’s Right, Lead with Grace, Win Together, and Own It—in everything it does for its customers and team members. The company seeks to grow aggressively, both organically and through acquisition, to continue to be the undisputed market leader with these five core competencies: bias for action, customer focus, teamwork, drive for results, and commitment to excellence.

Position Overview: 

The Information Security Analyst is responsible for monitoring the organization’s networks and systems to detect security breaches and suspicious activities. They conduct regular assessments and respond to incidents by investigating and mitigating threats. Their duties include maintaining and updating security tools and software to protect data. They document security incidents and prepare reports to inform management about potential risks. Additionally, the security analyst will evaluate and improve existing security related processes and procedures.

Essential Responsibilities:

• Monitors log and event output from multiple information security tools including but not limited to security information and event management (SIEM) technology, firewalls, networks, secure web/e-mail proxy, threat intel platforms, and end user security platforms.
• Investigates anomalies and responds according to established standard operating procedures.
• Performs routine but critical information security technology tasks including but not limited to SIEM tuning, secure web proxy configuration changes, e-mail security investigations, firewall change request reviews and software approval assessments.
• Participates and leads security incident response procedures.
• Processes any information security policy changes needed as determined by information security team leadership.
• Researches trending threats and provides regular reports with accompanying security tools impact analyses.
• Acts as a technical resource during internal and external audit engagements and is responsible for gathering security related technical evidence as required.
• Educates employees in information security best practices.
• Stays abreast of developments in the information security industry.
• Takes initiative on leading security related projects as determined by information security team leadership.
• Represents the information security team on cross team co-operative projects with other shared service organizations as required.

Qualifications:

• Required
• Bachelors, Information Technology or High School Diploma/GED and appropriate on the job experience in information technology and/or information security.
• Minimum of one year experience as an information security analyst or two years of experience in a technical focused IT role (including but not limited to service desk, server administration, network administration, IT compliance or other systems support role).
• Ability to deal with changing priorities and multi-task several projects.
• Ability to identify compromised systems and lead remediation efforts.
• Excellent presentation and communication skills.
• Demonstrable verbal and written communication experience.
• Detail-oriented individuals that work well in a team environment and have a hunger to learn.
• Analytical and problem-solving skills
• Must be located in Arizona, Florida, or Indianapolis and willing to commute up to two days into office.

• Preferred

• Experience with using and/or managing a commercial SIEM.

• Candidates should have a working knowledge of basic information security concepts and beginning to intermediate familiarity with common security technologies such as anti-virus, firewalls, DLP, web content filters, proxy servers, intrusion prevention systems, Windows event logging and syslog.

• Candidates should be familiar with networking fundamentals and have a basic to intermediate understanding of common network and application layer protocols such as TCP/IP, HTTP, DNS, SMTP and FTP.

• Information Security certifications, such as: CISSP, GSEC, GCED, Security+, etc. are a plus.
• Other entry level IT certifications, such as: Network+, Linux+, etc. are a plus.

This position is not open to relocation and does not provide sponsorship now or in the future.