It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.
The Cyber Security Analyst is responsible for contributing to, and strengthening, the Information Security function and role throughout the organization. The Analyst will update, document and maintain security standards and policies for the organization. The Analyst will help in the identification, analysis and reporting of cyber threats in addition to ensuring business operations are conducted in accordance with established guidelines and regulatory requirements.
Essential Functions
- Monitor, triage, investigate, and resolve security alerts, support tickets, and incidents, including containment, root cause analysis, chain of custody, and preventive actions
-
Identify security risks, recommend remediation or mitigating controls, and support ongoing risk assessments and system testing
-
Apply and enforce information security policies, standards, and procedures, aligning with industry best practices and regulatory requirements (e.g., PCI, GLBA)
-
Support integration of regulatory and audit requirements into the security roadmap and ensure the Company’s computer systems meet compliance obligations
-
Collaborate with IT Operations to ensure servers, network devices, and security controls meet established security standards and are working as designed
-
Evaluate, implement, and perform compliance assessments on application, system, and security-related changes and solutions, adhering to established change control processes
-
Perform periodic internal security audit functions on IT operational controls, to include system access, DLP controls, firewall policies, etc.
-
Stay current with evolving security technologies and maintain relevant certifications
-
Participate in on-call rotation
-
Perform other related duties as assigned
Essential Knowledge, Skills, and Abilities
- Familiarity with various cyber threats and mitigating controls
-
Familiarity with various endpoints security solutions, email security solutions, security monitoring tools and appliances
-
Solid understanding of the OSI network model and network protocols such as TCP/IP, firewalls, proxies, IDPS concepts
-
Knowledge of security-oriented regulatory requirements and compliance a plus
-
Knowledge of the mortgage industry is helpful, but not required
-
Ability to work effectively, independently and with others in a collaborative, deadline-sensitive environment
-
Able to effectively communicate both verbally and in writing to accurately convey messages with both technical and non-technical users
-
Commitment and ability to cultivate a diverse and inclusive work environment.
Education
- Bachelor’s degree in computer science, Engineering or Information Systems Security is preferred
-
Security training certifications strongly preferred (Security+, Azure Fundamentals, Network+)
Experience
- Previous experience as an IT security specialist (1-3 years)
-
Experience working in IT (5+ years)
-
Experience as a security specialist in a regulated IT environment including some combination of SOX, HIPAA, GLBA, PCI (1+ years)
Compensation and Benefits
-
Covius offers an extensive benefits package for all employees, including medical, dental, vision and 401(k)!
-
Compensation: $70,000 - $87,500 annualized with a 5% AIP opportunity
Application Guidelines:
For best consideration, please submit your resume and application materials as soon as possible. Review of applications will begin immediately.
Working Conditions
This position follows a hybrid work model, combining remote work with in-office presence. Employees are expected to maintain a professional home office environment and be available to work on-site as scheduled or as business needs require. Work is performed both remotely and in a standard office setting. Flexible work hours may be available, with expectations to attend meetings and collaborate during core business hours. Reliable internet access is required for remote work, along with the ability to be on camera to participate in virtual meetings and communications. During in-office days, work is performed in a climate-controlled office with standard lighting and noise levels. Employees must comply with company policies regarding data security, time tracking, and collaboration tools across both work environments.
Physical Demands and Activities
While performing the duties of this job, the employee is frequently required to communicate. The employee is regularly required to stand, walk, sit, and constantly operate a computer and other office equipment using hands and fingers for fine manipulation, including keyboarding and mouse use. The employee must occasionally lift, carry, push, pull, or otherwise move objects, such as files and small parcels and/or move boxes weighing up to 15 lbs. Prolonged periods of sitting or standing may be required depending on the nature of the work. Specific vision abilities required by this job include close vision, distance vision, and the ability to observe objects at close range in presence of glare or bright lighting (e.g. computer screen).
Covius is committed to equal opportunity in all employment practices to all qualified applicants and employees without regard to race, color, religion, gender, gender identity, age, national origin, pregnancy, disability, genetics, marital status, military or veteran status or any other protected category as established by local, state, and federal law. This policy applies to all aspects of the employment relationship including recruitment and hiring, placement, promotion, transfer, compensation, disciplinary action, layoff, leaves of absence, training, and termination. All such employment decisions will be made without unlawful discrimination based on any prohibited basis.
The essential functions, working conditions and physical demands described above are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.
Please note that all job descriptions are not intended to be all-inclusive. This job description is not designed to cover all activities, duties or responsibilities that are required of the employee for this job. Employees may be required to perform other duties at any time with or without notice to meet the ongoing needs of the organization.
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
