Please note that this position is based in San Diego, CA. Acadia’s hybrid model requires this role to work in our office three days per week on average.

The Lead IT Security Analyst will be responsible for leading Cybersecurity operational efforts.  This position will lead any internal resources and outsourced security vendors in monitoring for and responding to cyber security related incidents.  The Lead IT Security Analyst will manage the vulnerability management program.  The position will also lead threat intelligence and threat hunting efforts.

Primary Responsibilities:

• Manage various security providers on a daily basis to identify, analyze, and mitigate risks in the environment.
• Maintain ownership of the vulnerability management systems, vendors, and processes.
• Lead and conduct threat hunts, including gathering threat intelligence and proactively monitors systems.
• Interact with IT team members and lead efforts to secure the environment and mitigate identified threats in a timely manner.
• Manage and monitor all security tools employed within the organization.
• Continuously maintain and update threat hunt tactics and techniques.
• Remain current on cyber security trends and intelligence (open source and commercial) in order to guide the security analysis & identification capabilities of the organization.
• Align standards, frameworks, and security with overall business and technology strategy.
• Actively reviews the Information Security ticket queue and resolves or escalates assigned incidents on a timely basis.
• Analyze file samples and web links to identify if they are malicious and determine steps to remediate and mitigate any threats posed.
• Support security incident response and forensic investigations.
• Support cyber security audits to support corporate, financial, and regulatory processes for networks, applications, endpoint devices, and communications.
• Assist with the maintenance and annual testing of the Cyber Incident Response Plan.
• Support Cybersecurity Engineer with projects or initiatives.
• Participate in Acadia’s third-party risk management (TPRM) efforts.
• Other duties as assigned.

Education/Experience/Skills:

Bachelor’s degree in Information Technology or Cybersecurity, or related field.  Targeting 5 years of IT experience working with desktop/laptop technologies, networks, and cloud-based solutions; of which 3 years within an operational cybersecurity role, preferably within the pharmaceutical or biotech industry.  Must have cybersecurity related certification (Security+, CCNP Security, SSCP, CISSP, etc.).  An equivalent combination of relevant education and experience may be considered.

Must possess:

• Excellent understanding of security logging, monitoring, and event management applications.
• Strong knowledge of Information Security standards, practices, procedures, and tools.
• Strong knowledge of threat intelligence gathering and threat hunting techniques.
• Thorough knowledge of anti-virus/EDR and Windows security settings and controls.
• Excellent understanding of desktop/laptop technologies including Windows, MS-Office, imaging tools, and BIOS updates.
• Excellent understanding of software systems patching, management, and deployment solutions.
• Knowledge of network support, VLANs, VPN, firewalls, and wireless.
• Task-oriented, able to prioritize work or escalate issues to management.
• Exhibit a high-level of attention to detail.

Scope:

Uses professional concepts and company objectives to resolve complex issues in creative and effective ways, exercising judgment in selecting methods, techniques and evaluation criteria for obtaining results.  Works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors.  Work as part of a team.

Physical Requirements:

While performing the duties of this job, the employee is regularly required to stand; walk; sit; use hands to finger, handle, or feel; reach with hands and arms; climb or balance; stoop, kneel, crouch, see, talk or hear in a standard office environment and independently from remote locations. Employee must occasionally lift and/or move up to 15 pounds.   Ability to travel independently overnight up to 20% of the time and work after hours if required by travel schedule or business issues.

 #LI-MS1 #LI-HYBRID