Sr. IT Security Analyst, CISSP – Remote

Location:

Plano, TX, US

Job Summary

 The Senior Analyst Security is responsible for working with the detect, respond and recover team protecting our legendary brand. This role will work within a variety of security disciplines including, red/blue team exercises, threat hunting, vulnerability management, design, architecture, technical service management, and service operation functions as appropriate in cybersecurity disciplined fields. The Senior Analyst Security will contribute and participate in Disaster Recovery and cyber recovery activities, and work on a team accountable for Incident Response. Our organization leverages the NIST Cyber Security Framework and works well in a cross functional environment. This role is a technical, cybersecurity role, and will actively work on complex technical scenarios across an international audience to arrive at a resolution via a methodical standardized process, and provide detailed technical cybersecurity support to peers, other members of the Digital Office (DO) and business stakeholders alike. The Senior Analyst Security will work across a variety of critical business domains including consumer, dealer, corporate and industry lines such as manufacturing, financial services, and general merchandise, etc.

Job Responsibilities

• Generalist within the Detect/Respond/Recover NIST CSF domains
• Assist in maintaining a secure enterprise environment across the HDI technical landscape; leverage specific or broad in-depth technical skillsets to achieve this outcome
• Manage outcome-based delivery model via outsourced partner leveraging technical leadership to pre-defined desired service operations outcomes
• Demonstrate understanding and ability to apply cyber security best practices, understand common issues and remediation techniques leveraging systematic approach (MITRE ATT@CK, OWASP top 10, NIST CsF, etc.)
• Knowledge of the best available tools, software, threat hunting techniques, red/blue team member, pen testing, applications and systems for maintaining best-in-class security environment status
• Demonstrate expertise with security and information system life cycle methodologies, including remediation of cyber security issues, as well as audit risk mitigation activities
• Communicate clearly, diplomatically and effectively at all levels of the organization and to audiences with varying degrees of process and technical knowledge
• Assist with security testing and vulnerability management across various technical mediums
• Execute tasks in a high-pressure environment and multi-task | Experience working in a team-oriented, matrixed, collaborative environment while using analytical and problem-solving skills.

Education Requirements

Education Specifications

• Bachelor Degree in computer science, MIS, Information Systems or Services is Preferred.
• Certified Information Systems Security Professional (CISSP) (within 12 months of employment)

Experience Requirements

Required

• 3-5 years active cyber security domain experience
• Hands on experience and proficiency in various cybersecurity tools that are common across the information security industry

Preferred

• Candidates that have multiple cyber security domain competencies to build in a matrixed environment
• Previous Information Technology experience a plus (network, storage, infrastructure/cloud, etc.)
• In-depth knowledge of common network cyber security tools/technologies to support the information security program

Competencies:
At Harley-Davidson it is not just about the degree you have or what you know. You must also exhibit and demonstrate our valued behaviors in everything you do.
Fair, Honest, Positive and Creative (FHPC) is our moral compass and will help guide us to do better as we rewire the company and look to our future. The essence of our Valued Behaviors and our Code of Business Conduct boils down to being FHPC.

#remote