Cyber Security Analyst - State Farm Insurance Richardson, TX, United States Bookmark Share Print 586 9 40

Listing Description

Looking to work for a Fortune 50 company that is an evolving leader in the IT industry?

State Farm is looking for highly motivated individuals with a strong IT and Cyber Security Intelligence experience.

This posting is on the Threat Intelligence Team in the Cybersecurity Defense Center (CSDC).

The CSDC is responsible for detecting & responding to cyber threats affecting the confidentiality, integrity, & availability of State Farm's information resources. The Threat Intelligence Team collects & processes cyber intelligence in order to deliver timely information to decision makers. The information collected by the team is sourced & analyzed for potential impact to its constituents.

Job responsibilities & duties:

Process, analyze, and report intelligence in an effort to preempt or reduce threat exposure. Specific attention is paid to threat actors' tactics, techniques, and procedures, their motivation, intent, capability, and how threats or threat actors may target State Farm (either directly or indirectly). Intelligence Analysts are responsible for providing context and prioritization information to both Leads and other Intel Analysts through the threat Intel protocol. Intelligence Analysts must maintain a solid understanding of State Farm business operations and environment in order to determine the relevance of threat intelligence consumed, as well as the vectors of attack that may be exploited (whether technical or non-technical in nature).

This position will have an 18-month incumbency period for a lateral move and a 6-month incumbency period for a promotional opportunity (beginning on the effective date of the position) which must be met before the employee can post for any other State Farm position. The incumbency period does not affect the at-will relationship between State Farm and the employee and does not create an employment contract, nor contractual rights.•Analyzes, designs, and facilitates capabilities, solutions, or preventative/remediation controls to protect proprietary/confidential data and systems in accordance with industry standards and governance/compliance requirements

•Synthesizes solution design, architectural patterns, policy and regulatory frameworks, privacy considerations, and risks in the creation of holistic solutions that span technologies and capabilities

•Develops end-to-end security solutions leveraging existing or new capabilities, patterns, and/or processes

•Works across platforms and technologies to design holistic security designs that treat identified risks and enable strategic and/or tactical business or IT solutions

•Researches/investigates emerging business application security topics, threats, capabilities, and solution options to create/update policy and governance, technology strategies, solution architecture, and vulnerability assessments

•Applies industry standard risk management techniques and knowledge across various business application security capabilities (i.e. technical, application, data and mobile) to determine effectiveness of controls and to create action plans that remediate identified risks