Security Analyst

• Develop a learning and awareness program to cultivate a culture of cybersecurity within Lennar
• Educate Lennar associates and contractors on security threats and defensive measures
• Design, deploy, and maintain security solutions supporting compliance management frameworks, policies, standards, and best practices
• Assist in identifying, analyzing, and assessing information risk scenarios
• Provide expertise and guidance to reduce security risks and ensure controls meet legal and regulatory compliance
• Recommend solutions to mitigate and eliminate compliance risks to Lennar information assets
• Implement solutions aligned with IT strategy and standards
• Measure and assure controls are properly implemented and managed to protect Lennar’s information and physical assets
• Participate in technology evaluations of risks and controls, particularly for high-risk systems and applications
• Advise application, system, and data owners on control objectives, control design, and control operation effectiveness
• Support communication between internal/external audit, information security, IT operations, departments, and business units
• Apply and maintain understanding of security standards and best-practice frameworks

Senior Security Analyst

• Perform application security assessments against web, API, mobile, and cloud applications
• Analyze and triage findings from SAST, DAST, dependency scanning, and other security testing platforms
• Assist development teams with vulnerability remediation guidance and secure coding recommendations
• Participate in threat modeling and architecture review activities
• Improve application security automation and security testing within CI/CD pipelines
• Support dependency management and software supply chain security initiatives
• Collaborate with technology teams to improve secure development lifecycle practices
• Execute red team, purple team, and adversary emulation activities under established rules of engagement
• Assist with internal penetration testing exercises and third-party penetration testing coordination
• Conduct security control validation and threat-informed testing using MITRE ATT&CK methodologies
• Research adversary tactics, techniques, and procedures and translate intelligence into testing scenarios
• Perform offensive security assessments against enterprise infrastructure, cloud environments, and applications
• Document findings and provide actionable recommendations to improve detection and prevention capabilities
• Partner with defensive security teams to validate response and monitoring effectiveness
• Participate in risk-related projects and assessments
• Analyze and define security policies and standards
• Monitor, alert, and respond to security events
• Perform computer forensic and investigative activities, penetration testing, and vulnerability testing
• Define and administer identity and access roles and workflows

Offensive Application Security Analyst

• Contribute to, implement, and maintain the credit union’s cybersecurity program
• Investigate and respond to security incidents and provide status updates to management
• Review daily information-security log reports and investigate anomalous behavior
• Process reported social-engineering attempts and communicate outcomes
• Monitor, investigate, remediate, and report security incidents with the Incident Response Team
• Conduct organization-wide social-engineering exercises and assist with training remediation
• Administer the vulnerability-management program and coordinate vulnerability remediation
• Administer the credit union’s information-security systems and tools
• Contribute to security policies, procedures, and processes
• Implement information-security strategies and objectives approved by the Chief Information Security Officer
• Participate on the Change Control Board and ensure appropriate security design and controls
• Participate in industry collaboration on emerging security threats
• Deploy, integrate, and initially configure new and enhanced security solutions
• Champion security awareness and training programs
• Participate in NIST-based incident-response processes, investigations, reviews, and tabletop exercises
• Supervise investigations and provide ongoing communications and reports on significant security events to the board, supervisory committee, and management
• Respond to and comply with audit, regulatory, and credit union policies and procedures
• Monitor and respond to security alerts during non-business hours

Information Security Analyst

• Provide services as a non-employee contingent worker for TIAA’s family of companies through TIAA’s preferred third-party supplier
• Draft, communicate, implement, enforce, and monitor organizational security controls
• Manage and monitor IT systems and networks to protect organizational information
• Ensure implementation of secure operating systems, networks, and databases
• Perform complex risk assessments and test data processing systems and security measures
• Draft plans to protect computer files from accidental or unauthorized modification, destruction, or disclosure
• Encrypt data transmissions and erect firewalls to protect confidential information
• Facilitate risk audits and assessments
• Provide application-design recommendations to ensure operating effectiveness
• Monitor analysis of system access logs and ensure only permitted individuals access company information
• Review security-procedure violations and discuss procedures with violators
• Train users and promote security awareness

Security Analyst jobs in Illinois

Senior Security Analyst

Offensive Application Security Analyst

Information Security Analyst

Cyber Security Analyst III