Information Security Analyst jobs in United States
cer-icon
Apply on Employer Site
company-logo

BakerHostetler · 2 days ago

Information Security Analyst

BakerHostetler is a law firm that is seeking an Information Security Analyst to execute tactical and strategic initiatives of the Information Security team. The role involves managing security vulnerabilities, incident response, and cloud security, while collaborating with various teams to ensure the security of the firm's systems and data.

Law Practice
check
H1B Sponsor Likelynote

Responsibilities

Execute on security strategy as defined by the Information Security Manager
Participation in the Firm’s Vulnerability Management Program, working with cross-functional teams to identify, manage and mitigate security vulnerabilities across the Firm
Assist with the administration of the Firm’s Vendor Risk Management process, including analyzing and responding to third-party risk assessments
Monitor and respond to information security alerts and notifications (IDS/IPS, SIEM, AV/EDR, etc.)
Design, review and administer Azure cloud security controls and architecture, including auditing Azure cloud environments
Utilize scripting languages such as PowerShell and Python to automate tasks and improve security operations
Collaborate and advise on IT projects to ensure security issues are addressed throughout the project life cycle
Assist other IT teams in developing and employing security solutions across various applications and product platforms
Administer and utilize various endpoint and network security tools, such as CrowdStrike, SIEM tools, Fortinet or other comparable advanced detection and response tools
Administer and utilize vulnerability scanning, packet analysis and exploitation tools such as Nessus, nmap, Wireshark, tcpdump, Metasploit or similar technologies
Design, review and aid with implementation of secure networks and system architecture (ex. network topology reviews, firewall ruleset reviews, minimum security baselines, etc.)
Apply appropriate controls referenced in various security frameworks and standards, such as the NIST CSF 2.0 Framework, NIST 800-53, CIS Controls, etc
Monitor and secure Microsoft client and server systems, along with Fortinet and Cisco (or comparable) network devices
Assist with the management and maintenance of user security policy education, training and awareness programs
Conduct security research to stay abreast of latest security issues, including laws and regulations which may affect the Firm
Other duties as requested and assigned

Qualification

Information SecurityRisk ManagementCloud SecurityIncident ResponseVulnerability ManagementAzure SecurityPowerShellPythonNIST StandardsAnalytical SkillsCommunication SkillsOrganizational Skills

Required

Bachelor's Degree in Computer Science, Management Information Systems or related field with a minimum of 5-7 years of experience in Information Technology, or equivalent combination of education and experience
This must include 3-5 years of experience in Information Security with two or more of the following domains: Windows Systems Administration, UNIX/Linux Systems Administration, Networking, Access Control, Incident Response, and Information & Data Security
Demonstrated proficiency in Microsoft Office Suite including Word, Outlook, Excel, and PowerPoint
Proven aptitude to learn new software applications
Very strong communication skills, both written and oral
Excellent interpersonal communication skills necessary to maintain effective relationships with staff, trusted third-party partners, attorneys and clients
Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals
Ability to apply common sense understanding to carry out instructions furnished in written, oral, or diagram form
Ability to deal with problems involving several concrete variables in standardized situations
Ability to define problems, collect data, establish facts and draw valid conclusions
Ability to interpret an extensive variety of instructions and deal with several abstract and concrete variables
Exhibit independent thinking and decision making
Ability to think strategically, develop tactics and execute pragmatically
Excellent organizational and planning skills with ability to prioritize multiple tasks and projects to meet deadlines
Ability to work under pressure in a fast-paced environment with demanding individuals
Strong analytical and organizational skills with a tolerance for uncertainty and an ability to prioritize and complete simultaneous projects with minimal supervision
Outstanding creativity; flexibility and persistence; motivation and energy with the ability to work with little supervision and collaborate with other members of the team
Ability to work overtime when needed
A tolerance for uncertainty and an ability to prioritize and complete simultaneous projects with minimal supervision
Thorough understanding of technologies that can be applied to firm operations and enhance working efficiency
Ability to exercise discretion with confidential and sensitive information

Preferred

Certified Information Systems Security Professional (CISSP)
GIAC GSEC, GCIH, GCIA, GCWN, or equivalent certification
CompTIA Security+, CySA+, Network+, CASP or equivalent certification
Microsoft Azure Security Certifications (i.e. AZ-500, SC-100 to SC-400)

Benefits

Performance- and hours-based bonus program

Company

BakerHostetler

twitter
company-logo
Recognized as one of the top firms for client service and quality of legal services, BakerHostetler is a leading law firm that helps clients around the world address their most complex and critical business and regulatory issues.

H1B Sponsorship

BakerHostetler has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (4)
2024 (1)
2023 (2)
2022 (3)
2021 (1)
2020 (4)

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Aaron Rabinowitz
Partner
linkedin
leader-logo
Adam Finerman
Partner
linkedin
Company data provided by crunchbase