Security Analyst

Granite delivers advanced communications and technology solutions to businesses and government agencies throughout the United States and Canada. We provide exceptional customized service with an emphasis on reliability and outstanding customer support and our customers include over 85 of the Fortune 100. Granite has over $1.85 Billion in revenue with more than 2,100 employees and is headquartered in Quincy, MA. Our mission is to be the leading telecommunications company wherever we offer services as well as provide an environment where the value of each individual is recognized and where each person has the opportunity to further their growth and achieve success.

Granite has been recognized by the Boston Business Journal as one of the "Healthiest Companies" in Massachusetts for the past 15 consecutive years.

Our offices have onsite fully equipped state of the art gyms for employees at zero cost.

Granite's philanthropy is unparalleled with over $300 million in donations to organizations such as Dana Farber Cancer Institute, The ALS Foundation and the Alzheimer's Association to name a few.

We have been consistently rated a "Fastest Growing Company" by Inc. Magazine.

Granite was named to Forbes List of America's Best Employers 2022, 2023 and 2024.

Granite was recently named One of Forbes Best Employers for Diversity.

Our company's insurance package includes health, dental, vision, life, disability coverage, 401K retirement with company match, childcare benefits, tuition assistance, and more.

If you are a highly motivated individual who wants to grow your career with a fast paced and progressive company, Granite has countless opportunities for you.

EOE/M/F/Vets/Disabled

General Summary of Position:

The Security Analyst will play a critical role in ensuring the security and integrity of our systems and data. The successful candidate will be responsible for monitoring, analyzing, and responding to security incidents and events, as well as conducting proactive security assessments and audits. The Security Analyst will work closely with other members of the security team, as well as cross-functional teams, to implement and maintain security controls, policies, and procedures. The role requires strong technical expertise in cybersecurity, as well as excellent problem-solving and communication skills.

Responsibilities:

• Monitor and analyze security events and incidents to detect potential security breaches and take appropriate action to mitigate risks.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend remediation measures.
• Implement and maintain security controls, policies, and procedures to protect against threats and vulnerabilities.
• Collaborate with cross-functional teams to ensure security best practices are followed throughout the organization.
• Provide technical expertise and guidance to stakeholders on security-related matters.
• Stay up-to-date with the latest trends and developments in cybersecurity, and proactively recommend and implement improvements to the security posture of the organization.
• Investigate and resolve security incidents and provide timely and accurate reports to management.
• Participate in security incident response activities, including containment, eradication, and recovery.
• Perform security risk assessments and contribute to the development of risk mitigation strategies.
• Assist with security awareness training and education programs for employees.
• Participate in the development and maintenance of security documentation, including policies, standards, and procedures.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience working in a cybersecurity or information security role.
• Strong technical expertise in various security technologies, such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, endpoint security, and vulnerability assessment tools.
• Experience with security incident response and handling, including investigation, containment, eradication, and recovery.
• Knowledge of security best practices, standards, and frameworks, such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, and GDPR.
• Familiarity with regulatory compliance requirements, such as HIPAA, PCI-DSS, and SOX.
• Excellent problem-solving skills and ability to analyze complex security incidents and events.
• Strong communication skills, both written and verbal, with the ability to effectively communicate technical concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a team-oriented environment.
• Relevant certifications, such as CISSP, CISM, CEH, or other related certifications, are a plus.