Analyst, Cybersecurity

<div class="content-intro"><p>Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States.&nbsp;</p> <p>Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities.</p> <p>Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit&nbsp;<a href="http://vestwell.com/">vestwell.com</a></p></div><p><strong>Who Are We Looking For?</strong></p> <p>The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization. The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security systems.</p> <p>You should have a sound working knowledge of cybersecurity, including intrusion prevention and incident response. You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills.</p> <p><strong>What Will You Be Doing?</strong></p> <p>Manage all day-to-day activities within the Security organization. This would include:</p> <ul> <li>Management of Anti-Virus and Anti-Malware solutions like CrowdStrike.</li> <ul> <li>Monitoring and alerting management.</li> <li>Confirm infrastructure has most recent patches, updates and libraries.</li> </ul> <li>Management of 1Password</li> <ul> <li>Management of vaults and user access for both passwords and keys</li> </ul> <li>Management of KnowBe4</li> <ul> <li>Phishing tests and training and response.</li> </ul> <li>Develop ongoing security posture improvements.</li> <ul> <li>Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected.</li> </ul> <li>Management of Nightfall DLP solution.</li> <ul> <li>Evaluate existing Detection Rules.</li> <li>Implement detection rules based on growth of the Vestwell platform.</li> <li>Action against alerts triggered for DLP leakage.</li> </ul> <li>Work closely with Engineering to provide guidance and advice on industry best practice security.</li> <li>Authentication &amp; Authorization</li> <ul> <li>Work with stakeholders to continue evolving the A&amp;A platforms at Vestwell to adhere to industry standards and Vestwell growth.</li> </ul> <li>Support responses to DDQ's or Risk Questionnaires that come in from potential customers.</li> </ul> <p>Day to Day, You May Also Be Expected To:</p> <ul> <li>Work closely with Legal and Compliance teams to evaluate and improve policies.</li> <li>Work closely with the CorpIT team to evolve the onboarding and offboarding process with a focus on Security.</li> </ul> <p><strong>Requirements</strong></p> <p><em>The Necessities</em></p> <ul> <li>Professional experience in computer science, programming, or related field.</li> <li>Professional&nbsp; experience working in computer systems with some specialization in computer security.</li> <li>The ability to manage competing deadlines.</li> <li>Excellent verbal and written communication skills, interpersonal, and teaching skills.</li> <li>Ability to anticipate, analyze, and problem-solve</li> <li>The ability to remain current on the latest technology and best practices in information security.</li> <li>Proficient, or able to gain proficiency with, a broad array of security software applications and tools.</li> <li>Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication.</li> <li>Experienced with penetration testing and techniques.</li> <li>Understand patch management.</li> </ul> <p><em>The Extras</em></p> <ul> <li>Advanced training certifications may be advantageous.</li> <ul> <li>CISSP</li> </ul> <li>Training or experience with SOC audits.</li> <li>Training or experience with Financial Regulatory Audits/Compliance (ERISA, SEC, etc.)</li> </ul> <p><em>The expected salary range for this position is $90K-110K for New York.</em></p><div class="content-conclusion"><p><strong>OUR BENEFITS</strong></p> <p><span style="font-weight: 400;">We’re an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan, Austin, King of Prussia, and Phoenix offices, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan!</span></p> <p><span style="font-weight: 400;"><strong>OUR PROCESS</strong><br><br>It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well.&nbsp;<em data-stringify-type="italic">Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer.</em>&nbsp;We prioritize transparency and lack of surprise throughout the process.</span></p> <p><span style="font-weight: 400;">For your awareness you will only receive correspondence from [email protected] any other domain not ending in&nbsp;<a href="http://vestwell.com/">Vestwell.com</a>&nbsp;is not our Recruitment team.</span></p> <p><span style="font-weight: 400;"><em>Vestwell’s&nbsp;</em><a href="https://www.vestwell.com/privacy-policy"><em>Privacy Policy.</em></a><em>&nbsp;Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here:&nbsp;</em><a href="https://docs.google.com/document/d/1lKSzA8qE7YIAJe2ZZahLWzFp9EZP1IuS/edit?usp=sharing&amp;ouid=111643980444675168924&amp;rtpof=true&amp;sd=true"><em>Vestwell’s California Privacy Rights Policy.</em></a></span></p></div>