Systems and Cybersecurity Analyst

Company Overview:

Zenni pioneered the online eyewear industry in 2003 with a mission to make prescription eyewear affordable and accessible to everyone. Based in Marin County, California, Zenni offers men, women, and children the freedom to express their personal style and individuality through high-quality prescription and protective eyewear curated with a sense of fashion and an incredible selection. With over 50 million frames sold worldwide, a pair of Zenni's is owned in every country across the globe. Zenni is proud to be the Official Eyewear Partner of the Chicago Bulls, and San Francisco 49ers. For more information, visit or connect on Facebook, Twitter, Instagram, or Pinterest.

Position Overview:

Zenni is looking for an Systems and Cybersecurity Analyst to design, analyze, and implement IT security systems to protect the organization's computer networks from cyber attacks. You will also help supporting employees day to day issue and develop organization-wide best practices for IT security. You will monitor computer networks for security issues, install security software, and document all security issues or breaches you find.

An ideal candidate will be proficient with multiple O/S, with experience in penetration testing and techniques installing security software and documenting security issues. Experience in a fast-paced, start-up environment in the technology sector is helpful.

Reporting to the Director of Infrastructure and CyberSecurity, this role will monitor and review cyber security telemetry in various dashboards and tooling, identifying potential malicious activity and responding accordingly in cooperation with the rest of the IT Operations team.

Highlights

Hybrid role, 3-5 days in Novato, CA

6 + Weeks of PTO

Generous Bonus Potential

100 % Paid Health, Dental and Vision Insurance Premiums

Stable and Secure company with potential for growth and impact - See this article regarding our financial health and stability

What we want you to own in this role:

• Support and Maintain organizational computer systems, desktops and peripherals
• Analyze, troubleshoot and maintain computer networks
• Setting up new users, ensuring access and permissions
• Identify activity that is malicious, suspicious, or out of policy and respond accordingly based on Standard Operating Procedures
• Review logging and alerting from our tooling, including: EDR/UEM | SIEM | DLP
• Help develop Standard Operating Procedures to meet emerging threats.
• Review Threat Intelligence feeds, determine Zenni's exposure to those threats and develop hunting methodologies to identify any imminent attacks
• Review vulnerability reports from scanning tools, analyze for trends, and prioritize remediation activities, working with business units.
• Keep current on information security risks and the Tactics Techniques and Procedures (TTP) of attackers.
• Participate in Incident Response activities
• Participate in IT operations daily activities
• Help deploy SAST/ DAST solutions for Vulnerability management and assist in analyzing and monitoring Google Cloud Platform resources

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related field. Relevant certifications such as CISSP, CISM, or CEH are highly desirable.
• Proven experience working as an Information Security Analyst or in a similar role.
• Strong knowledge of information security principles, best practices, and industry standards.
• Experience with security tools and technologies, such as firewalls, intrusion detection systems, vulnerability scanners, and SIEM solutions.
• Familiarity with network protocols, TCP/IP, and operating systems (Windows, Linux, etc.).
• Excellent problem-solving skills and the ability to analyze complex security issues and recommend appropriate solutions.
• Strong communication skills, both written and verbal, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a team environment.
• Strong attention to detail and the ability to prioritize and manage multiple tasks simultaneously.
• Knowledge of regulatory requirements and frameworks, such as GDPR, SOC2, HIPAA, ISO 27001, and NIST

Preferred Experience:

• Experience collaborating with IT operations and product teams
• Coding experience, python preferred
• Experience with managing Linux systems and services in the Cloud environment
• Log and threat management utilizing SOAR and SIEM
• Disaster recovery Cloud backup and system support experience
• Strong working knowledge of information and physical security in an e-commerce startup environment
• Significant understanding of security and processes Excellent interpersonal skills
• Risk assessment and mitigation: Identify potential data security risks and vulnerabilities, conduct risk assessments, and develop plans to mitigate and manage these risks effectively.
• Data classification and access control:Execute data classification framework and access control mechanisms to ensure appropriate levels of data protection based on sensitivity and user roles.
• Incident response and management: Develop and maintain an incident response plan to promptly respond to and manage data security incidents, including data breaches, unauthorized access, or data loss.
• Security awareness and training: Promote data security awareness across the organization through training programs, communication campaigns, and regular education sessions to foster a culture of security-conscious employees.
• Works with the IT Security and Compliance team to coordinate communications with all departments and levels of management to minimize enterprise risk.
• Assists with Cybersecurity and IT Operations projects.
• Assists IT Management with project planning and goal alignment.
• Strong collaborator and business partner to other departments with demonstrated excellent communication
• Assists with audit processes as needed. Prior exposure to SOC2, ISO 27001, or NIST is preferred

Preferred qualifications:

• Data security, information security, or related roles
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Privacy Professional (CIPP),
• Data security principles, best practices, and industry standards Data protection laws and regulations, such as GDPR, CCPA, or HIPAA
• Network and system security technologies, including firewalls, intrusion detection systems, encryption, and authentication protocols
• Security assessment tools and methodologies
• Experience evaluating host and network forensic reports of electronic media, packet capture, log data analysis, malware triage, and network devices in support of intrusion analysis or enterprise-level information security operations.
• Experience in the consumption, processing, and analysis of tactical Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response capabilities.
• Experience deploying and analyzing data from technical security controls to include web proxy, firewalls, IPS, IDS, mail content scanning appliances, enterprise antivirus solutions, network analyzers, and other host-based protection solutions.
• Exposure to SDN, Firewalls, Google Cloud and AWS, WAF and CDN experience
• Scripting and alert automation and management
• Good documentation and presentation skills

Benefits

• Excellent health benefits that the company pays for and a 401k with company match.
• Annual Zenni Gift Card
• Interesting projects with opportunities for growth and professional development in a financially stable, successful, growing Company