Cybersecurity Analyst

SUMMARY Bering Straits Native Corporation is currently seeking a qualified Cybersecurity Analyst in Anchorage, Alaska. The Cybersecurity Analyst’s primary role is to be the analyst and subject matter expert of the Company’s cybersecurity plan and CMMC certification. The Security Analyst works independently within the established procedures to ensure network and systems security access and protect against unauthorized access, modifications, or destruction. They are the point person for the IT team and are responsible for installing, administering and troubleshooting Bering Straits’ security solutions.Their responsibilities include performing risk assessments, audits, staff training sessions, and monitoring network activity. The Cybersecurity Analyst will also write up security policies and training documents about security procedures. The incumbent will apply analytical, communication, and problem-solving skills to help identify, communicate, and resolve issues. In addition, this individual will also be responsible for identifying and implementing system improvements to optimize performance in a manner consistent with organizational goals, industry best practices, and regulatory requirements. ESSENTIAL DUTIES & RESPONSIBILITIES The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. Defending systems against unauthorized access, modification and / or destruction. Scanning and assessing network for vulnerabilities. Maintaining NIST compliance and CMMC certification. Monitoring network traffic for unusual activity. Configuring and supporting security tools such as firewalls, anti-virus software and patch management systems. Developing and implementing network security policies, application security, access control and corporate data safeguards. Developing and updating business continuity and disaster recovery protocols. Installing, administering, and troubleshooting network security solutions. Updating software with the latest security patches and ensuring the proper defenses are present for each network resource. Performing vulnerability and penetration tests, identifying and defending against threats. Configuring security systems, analyzing security requirements, and recommending improvements. Training fellow employees in security awareness and procedures. Functions as the technical lead on implementation or upgrade projects to enhance the applications to meet dynamic business requirements. Work closely with other IT support team to resolve any security related issues and provides recommendations for enhancements or changes as deemed necessary. QUALIFICATIONS - EXPERIENCE, EDUCATION AND CERTIFICATION To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Required (Minimum) Qualifications Bachelor’s Degree from an accredited college or university, with a major in Computer Science, Cybersecurity, MIS, or related field, or equivalent work experience is desired. Minimum two (2) or more years of progressive responsibility with relevant Information Technology work experience related to cybersecurity. CompTIA Security+ Certification Knowledge, Skills, Abilities, and Other Characteristics A strong understanding and knowledge of computer, network, and security systems. Good teaching, interpersonal, and communication skills. Eagerness to dig into technical questions and examine them from all sides. Enthusiasm and a high degree of adaptability. Strong analytical and diagnostic skills. Vigilant and detail-oriented, in order to effectively detect vulnerabilities and risks. A current understanding of web vulnerabilities. Maintaining awareness and knowledge of contemporary standards, practices, procedures and methods. Utilize tools and methods to support cybersecurity requirements that meet business goals and objectives. Prioritize tasks and schedule work assignments effectively, sometimes working with multiple priorities under limited time constraints. Effective interpersonal skills and ability to maintain positive working relationship with technical and nontechnical staff at all organization levels. Willingness to attend on-the-job or offsite training; work extended hours as workload and deadlines require; be on-call to respond to emergencies; and attend meetings and make formal presentations as necessary. Moderate understanding of computer and networking technologies (OS, TCP / IP, Routing, Subnets, Firewalls) Common networking protocols (SSH, SMB, SMTP, FTP / SFTP, DNS) Preferred Excellent technical skills and knowledge in the areas of IT infrastructure components such as server, storage, network, database, virtualization, operating systems and cloud technology. Server Administration / Network Administration background Quickly identify vulnerabilities and come up with real-time security solutions to address them. Proficient in documenting and maintaining configuration and process information. Certifications in Ethical Hacking, CISA or CISSP PHYSICAL REQUIREMENTS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Must maintain a constant state of mental alertness at all times. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Essential and marginal functions may require maintaining physical condition necessary for bending, stooping, sitting, walking or standing for prolonged periods of time; most of time is spent sitting in a comfortable position with frequent opportunity to move about. WORK ENVIRONMENT Work Environment characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of this job. Job is performed in an office setting with exposure to computer screens and requires extensive use of a computer, keyboard, mouse and multi-line telephone system. The work described herein is primarily a modern office setting. Occasional travel may be required. SUPERVISORY RESPONSIBILITIES No supervisory responsibilities. ADDITIONAL QUALIFYING FACTORS As a condition of employment, may be required to pass a pre-employment drug screening, as well as have acceptable reference and background check results to obtain access to military base. Must have reliable transportation to / from work a necessity and must be able to obtain access to military installations. Shareholder Preference.BSNC gives hiring, promotion, training and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job. Bering Straits Native Corporation is an equal opportunity employer.All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.