Information Security Analyst

5 days ago

Dallas, United States Cambium Learning Group Full time
Job Overview:

As an Information Security Analyst at Learning A-Z, you will play a crucial role in protecting our organization's sensitive information and ensuring compliance with regulatory standards. You will support Learning A-Z's existing Information Security programs, evaluate our security processes for adequacy, and provide technical and data support for improving our security posture and the effective use of Information Security capabilities and tools. Additionally, you will work closely with cross-functional teams to assess risks, implement security measures, and respond to security incidents.

Job Responsibilities:

  • Design and build an end-to-end enterprise application security program which includes both a centralized and decentralized model for application security testing, code scanning, issue tracking, issue remediation, key metrics, application logging
  • Run large scale programs that span the enterprise to deploy and manage dynamic scanning solutions
  • Configuring a tuning web application firewalls rules as needed.
  • Evaluate third-party tools and solutions from a security perspective
  • Work with architecture team to implement best practices around cookie and session storage
  • Develop, maintain and promote baseline security testing framework into part of regression testing
  • Develop, maintain, and report on key application security metrics - both as a program and on an individual basis; creating metric templates and scoring models
  • Coordinate with engineering, business, and technical subject matter specialists to identify and mitigate Information Security issues and incidents
  • Assist with Pen Testing of web-facing applications and run DAST for vulnerability assessment
  • Perform security monitoring. Follow up on alerts from Intrusion Detection Systems (IDS), and Security Information Event Management (SIEM) Systems
  • Manage and design the issue management around web application vulnerabilities, their tracking, reporting, metrics, resolution, and validation. Take a proactive approach to dealing with threats by using threat analysis to determine the most vulnerable components of an application and fortifying them.
  • Conduct deep-dive sessions with development teams and understand attack surface, threats, security controls and security design flaws
  • Perform Risk Assessment in accordance with ISO27001 requirements and develop appropriate Risk Treatment Plans by working with asset owners.
  • Work on a cross department team to help complete security related questions on RFPs and customer compliance documents.
Job Requirements:
  • 5-7 years of application security experience, including demonstrated experience with security testing of applications using SAST and DAST
  • Pen-testing experience against Windows, Linux, OSX, and mobile platform environments. Experience with Metasploit or similar tools is a plus.
  • Bachelor's Degree or equivalent experience in computer science, engineering, Information Systems or related technical field
  • Information Security Certifications - GWEB, CSSLP, CASE, CASS, GIAC, CompTIA Security+, AWS certification, CEH, Pen Testing certifications a plus
  • Understanding of web protocols, tools, and be well-versed in application security and infrastructure security
  • Experience with Cylance, Beyond Trust and other EDR tools a plus
  • Technical knowledge of front-end UIs through to back-end systems and all points in between
  • Experience with web application firewalls (WAF) such as Cloudflare.
  • Experienced in design reviews, application security architecture and best practices
  • Experienced in remediating vulnerabilities and defect fixes by working closely with development leads and engineers
  • Must have exceptional communication skills
  • Familiar with Open Web Application Security Project (OWASP) best practices
  • Knowledge of or experience with malware detection and prevention.


Why Work With Us?

When you work with Learning A-Z, you'll be helping students across the globe develop the comprehension, curiosity, and continued joy of learning they need to succeed in today's world.

We've been awarded numerous accolades from a wide variety of edtech organizations. Our flagship products Reading A-Z, Raz-Kids, and Raz-Plus are beloved by teachers and students alike, and are currently used by approximately 1/5 of public students in the United States.

To learn more about our organization and the exciting work we do, visit www.learninga-z.com.

An Equal Opportunity Employer

We are dedicated to fostering a culture that celebrates unique backgrounds, ideas, and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, age, religion, sex, gender, gender identity/expression, sexual orientation, national origin, protected veteran status, or disability.

  • Information Security Analyst

    4 weeks ago

    Dallas, United States Collabera Full time

    Description Home Search Jobs Job Description Information Security Analyst Remote: Dallas, Texas, US Salary: $65.00 Per Hour Job Code: 349212 End Date: 2024-06-08 Days Left: 5 days, 3 hours left Apply 100% remote Opportunity - Information Security Engineer MUST HAVES: 5+ years of information security applications and systems experience 5+ years of...

  • Information Security Analyst

    2 weeks ago

    Dallas, Texas, United States Collabera Full time

    Home Search Jobs Job Description Information Security Analyst Remote: Dallas, Texas, US Salary: $65.00 Per Hour Job Code: End Date: Days Left: 11 days, 3 hours left Apply 100% remote Opportunity - Information Security Engineer MUST HAVES:5+ years of information security applications and systems experience 5+ years of mainframe security risk assessment...

  • Information Security Analyst

    7 days ago

    Dallas, United States Servsys Corporation Full time

    Senior Solution AnalystLocation- Miramar, FL OR Dallas, TXNotes from spotlight call-Senior solution analyst-cyber response plan.Infosec space background ...secure offline. technology- Everbridge.3+ years of experience in at least ransom recovery, and protection - .warehouse operations OR logistics or Supply chain operations experience1st screening.. 2nd...

  • Principal Analyst Information Security

    2 weeks ago

    Dallas, United States Southern Glazer's Wine & Spirits Full time

    What You Need To KnowOpen the door to a groundbreaking tech career with an industry leader. Southern Glazer's Wine & Spirits is North America's preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we're heavily invested in the...

  • Principal Analyst Information Security

    2 weeks ago

    Dallas, Texas, United States Southern Glazer's Wine & Spirits Full time

    What You Need To KnowOpen the door to a groundbreaking tech career with an industry leader. Southern Glazer's Wine & Spirits is North America's preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we're heavily invested in the...

  • Principal Analyst Information Security

    5 days ago

    Dallas, United States Southern Glazer's Wine & Spirits Full time

    What You Need To KnowOpen the door to a groundbreaking tech career with an industry leader. Southern Glazer's Wine & Spirits is North America's preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we're heavily invested in the...

  • Principal Analyst Information Security

    3 days ago

    Dallas, United States Southern Glazer's Wine & Spirits Full time

    What You Need To Know Open the door to a groundbreaking tech career with an industry leader. Southern Glazer’s Wine & Spirits is North America’s preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we’re heavily invested...

  • Private Equity Analyst

    4 weeks ago

    Dallas, United States LP Analyst Full time

    Job DescriptionJob DescriptionCompany OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s...

  • Private Equity Analyst

    4 weeks ago

    Dallas, United States LP Analyst Full time

    Company OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s demanding investors.Our firm truly...

  • Private Equity Analyst

    4 weeks ago

    Dallas, United States LP Analyst Full time

    Company OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s demanding investors.Our firm truly...

  • Private Asset Analyst Intern

    7 days ago

    Dallas, United States LP Analyst Full time

    Company Overview LP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry's most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision making intelligence into the hands of today's demanding investors. Our firm truly...

  • Private Asset Analyst Intern

    3 weeks ago

    Dallas, United States LP Analyst Full time

    Job DescriptionJob DescriptionCompany OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision making intelligence into the hands of today’s...

  • Private Equity Analytics Senior Analyst

    3 weeks ago

    Dallas, United States LP Analyst Full time

    Company Overview LP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry's most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today's demanding investors. Our firm truly...

  • Private Equity Analytics Senior Analyst

    4 weeks ago

    Dallas, United States LP Analyst Full time

    Job DescriptionJob DescriptionCompany OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s...

  • Private Equity Analytics Senior Analyst

    4 weeks ago

    Dallas, United States LP Analyst Full time

    Job DescriptionJob DescriptionCompany OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s...

  • Private Equity Analytics Senior Analyst

    2 weeks ago

    Dallas, United States LP Analyst Full time

    Company OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s demanding investors.Our firm truly...

  • Private Equity Analytics Senior Analyst

    2 weeks ago

    Dallas, United States LP Analyst Full time

    Company OverviewLP Analyst is a leading independent private asset cloud-based analytics and consulting solutions firm that works closely with many of the industry’s most prominent institutional investors (LPs) and fund managers (GPs) to get better, more actionable decision-making intelligence into the hands of today’s demanding investors.Our firm truly...

  • Information Security Consultant

    2 weeks ago

    Dallas, United States Motion Recruitment Partners LLC Full time

    Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Information Security Analyst in Dallas, TX Secondary Locations – St. Louis MO, Charlotte NC, Des Moines IA, Tempe/Phoenix AZ (Hybrid 3 days onsite per week)Work with the brightest minds at one of the largest financial institutions in the world. This is a...

  • Cyber Security Analyst

    2 weeks ago

    Dallas, Texas, United States The Intersect Group Full time

    Job Title:Cyber Security AnalystSchedule:FULLY REMOTEMonday-FridayDuration:Full-time OpportunityPurpose and Job SummarySeeking a Cyber Security Analyst to join our growing cyber security team. You will analyze, assess, plan, and enact security measures to help protect the company from security breaches and attacks on its data, computer networks and systems....

  • Cyber Security Analyst

    4 weeks ago

    Dallas, United States Yoh, A Day & Zimmermann Company Full time

    Cybersecurity Analyst Direct Hire Dallas, TX (Onsite) Responsibilities; Our client is looking for a Cybersecurity Analyst to analyze, assess, plan, and enact security measures to help protect the company from security breaches and attacks on its data, computer networks and systems Participate as a core member of the incident response team Appropriately...