Overview
The role of the Security Operations Analyst is fundamental to the establishment and upkeep of a robust integrated security program. This program is designed to safeguard the integrity, confidentiality, and availability of our information systems assets. The analyst plays a pivotal role in ensuring the resilience of our security infrastructure by performing security administration functions and offering technical support on security-related matters to end-users. The analyst’s work is integral to fostering a culture of cybersecurity and contributing to the resilience and reputation of our organization in the face of evolving cyber threats.
Essential Functions
- Perform security-monitoring functions on various platform types: network devices, servers, applications, and databases.
- Monitor SIEM (firewalls, servers, and web proxies), IDS/IPS, WAF logs to identify malicious activity and attack patterns and participate in the incident response process when suspicious activity is noted.
- Assist in implementation of corporate security policy functions/procedures that align to security mandates/standards including Sarbanes-Oxley, HIPAA, and PCI compliance.
- Assist in maintaining policy and procedures that are designed to protect computer programs, databases and data files from unauthorized or accidental duplication, modification or destruction.
- Configure and monitor security products, which include: anti-virus (A/V), APT, DLP, WAF, web content filtering, IDS/IPS, vulnerability scanners, forensics tools, SIEM, database monitoring, and e-mail content filters.
Knowledge, Skills & Abilities
- Scope: A cybersecurity analyst is responsible for protecting an organization’s digital assets from cyber threats and unauthorized access. They monitor network traffic, investigate security incidents, and respond to breaches in real-time. Additionally, they develop and implement security protocols, conduct risk assessments, and ensure compliance with security standards.
- Problem solving: Strong analytical and problem-solving skills, including analytical thinking, critical thinking, attention to detail, creativity, technical proficiency, communication, and adaptability.
- Impact: Protecting the organization’s digital assets by preventing and responding to cyber threats and unauthorized access to maintain the integrity, confidentiality, and availability of sensitive information.
- Leadership: This position will be an analyst and will be expected to learn from peers and colleagues.
General Knowledge, Skills & Abilities for All Roles
- Knowledge: Understanding of workplace policies and procedures; familiarity with team collaboration tools and techniques.
- Skills: Strong time management and organizational skills.
- Abilities: Ability to maintain reliable and consistent attendance; punctuality and meeting deadlines; ability to collaborate effectively with colleagues and work as part of a team; demonstrated professionalism in all interactions and tasks.
Qualifications
- Experience with solutions: anti-virus, APT detection, data loss protection (DLP), WAF, web content filtering, IDS/IPS, vulnerability scanners, forensics tools, SIEM, database monitors.
- Experience with networking device components (managed switches, routers, firewalls).
- Experience managing web content filtering, spam e-mail filtering, and e-mail-related incidents.
- Experience with vulnerability scanning (static/dynamic) and penetration testing.
- Fundamentals in networking/distributed computing concepts; ability to configure and/or correlate information in DNS and understand basic network routing concepts.
- Broad technical knowledge including: TCP/IP, Active Directory, Microsoft Windows platforms (desktop/server), Open System platforms (desktop/servers), database platforms (SQL/Oracle).
- Programming and/or scripting experience preferred (e.g., Perl, Batch, or C).
- Service-oriented and able to work easily with end users, IT administrators, and management.
Work Environment & Travel
Travel: No or very little travel likely.
Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods.
Location: This position is in-office in South Florida. Requires employees to work from a Carnival office Monday through Thursday; Fridays may be remote. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.
Compensation & Benefits
Offers to selected candidates will be made on a fair and equitable basis, considering specific job-related skills and experience. All non-sales roles participate in an annual cash bonus program; sales roles have an incentive plan. Directors and above may be eligible for Carnival’s discretionary equity incentive plan. Benefits include:
- Health Benefits: medical, dental and vision plans; Employee Assistance Program; company-paid term life insurance and disability coverage.
- Financial Benefits: 401(k) with company match; Employee Stock Purchase plan.
- Paid Time Off: Holidays, Vacation, Sick Time with details varying by employee level and tenure.
- Other Benefits: Stand-by cruises, employee discounts, tuition reimbursement, and on-site fitness center at our Miami campus.
About Us & Equal Opportunity
Carnival Corporation & plc is an equal employment opportunity/affirmative action employer. It does not discriminate on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by law.
Our commitment to an ethical and compliant culture includes promoting integrity, honesty, and respectful treatment of others, and encouraging employees to speak up about misconduct or concerns.
For reference, relevant government resources: