Senior Information Security Analyst (Remote Possible)

Company Summary

Join a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for seven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com.

Job Summary

Responsible for supporting the Information Security awareness program initiatives, including protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.

Essential Functions

• Identifies work flow and business process requirements and related solutions over a complete business process including obtaining approvals, documentation, testing and training.
• Conducts risk assessments, interviewing internal and external customers, to gain technical knowledge of security/compliance requirements.
• Considers the business implications of work flow and processes to the current business environment.
• Identifies problems, researches alternatives, prepares presentations, drives solutions, tests to confirm, gains consensus, and implements solutions for multiple processes within multiple functions.
• Creates reports; researches and analyzes data, report trends and vital information to management/business partner.
• Provides direct support to information systems development and business community regarding risks associated with new or changing technologies.
• Keeps abreast of industry advancements and incorporates that knowledge into daily work activities.
• Participates in evaluation and selection of new technology.
• Troubleshoots and resolves security problems to obtain operations across all platforms including email, files transfer, multimedia, teleconferencing, etc.
• Monitors and reports to management on the status of project efforts, anticipating and identifying complex issues that inhibit the attainment of project goals and implementing corrective actions.
• Ability to effectively convey complex issues and communicate to a variety of audiences including technical staff, peers, as well as senior management, and oversight bodies
• Ensures procedural documentation of team functions are updated on a routine basis
• Required to perform duties outside of normal work hours based on business needs.

Knowledge and Skills/Technology Used

• Must have hands on knowledge of Next Generation Firewalls, network access list/packet filtering, WANs, LANs, Cloud Security concepts, network protocols and network services (i.e., telnet, ftp, etc.), Virtual Private Network (VPN), two factor authentication.
• Knowledge of Network Security Management tools such as AlgoSec, Tufin or Firemon
• Knowledge of Web filtering, URL categories, and other related content filtering technologies
• Experience in implementing and troubleshooting Information Security technologies and/or processes required
• Experience in product evaluation and managing vendor relationships required
• Experience in defining and/or providing recommendations related to the Information Security strategy and integrating security technologies into corporate frameworks
• Excellent written and verbal communication skills
• Excellent interpersonal, relationship-building and teamwork skills
• Self-motivated; self-starter
• Ability to manage multiple tasks, respond quickly to emergent problems, and focus both on long-range projects and immediate tasks
• Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.
• Listens and communicates technical subjects to both technical and nontechnical audiences, flexing style to suit the needs of the audience
• Proficient in Microsoft Visio, Word, Excel and PowerPoint

Typical Education

• Generally, requires a BS Degree in Computer Science, Information Technology, Telecommunications, or equivalent work experience

Typical Range of Experience

• Must have minimum 5-7 years information security experience
• Must have minimum 3-5 years of experience with networking security technologies for the following security technologies are required:
  • Network security: next-gen firewalls, cloud security group, ACLs, packet captures
  • Logging and monitoring: SIEM and Cloud Access Security Broker (CASB)
  • Azure/AWS cloud services and infrastructure
• Must have 3+ years’ experience with configuring networking technologies, Palo Alto and Cisco firewalls, and SIEM technologies

License or Certification

• Relevant, industry recognized security certification such as CCNA, CompTIA Network+, CompTIA Security+, CompTIA CASP+ and CCNP preferred

Open to remote candidates if out of area. For local candidates, this would be a hybrid role (in office 1-2 days per week).

Pay Range: $78,650- $145,200

This hiring range is a reasonable estimate of the base pay range for this position at the time of posting.  Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.

First American invests in its employees' development and well-being, empowers them to provide superior customer service and encourages them to serve the communities where they live and work. First American is committed to diversity and inclusion. We are an equal opportunity employer.

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.