Information Security Analyst III

The posting, as Allegiant wrote it

Summary
An individual contributor that serves as a senior individual contributor on the cybersecurity operations team, responsible for the day-to-day operation, tuning, and continuous improvement of the enterprise cybersecurity toolset. This role owns advanced detection and response work across endpoint, identity, application and cloud surfaces; leads investigations of escalated alerts; builds automation that removes manual effort from repeatable security tasks; and translates threat intelligence and vulnerability data into prioritized, actionable remediation for platform and application owners.
Visa Sponsorship Available
No
Minimum Requirements
Combination of Education and Experience will be considered. Must be authorized to work in the US as defined by the Immigration Act of 1986. Must pass a Criminal Background Check.
Education: Bachelor’s Degree
Education Details:
Bachelor's degree in Computer Science, Software Engineering or related field or equivalent combination of education and experience.
Certification: Yes
Certification Details:
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Offensive Security Certified Professional (OSCP), or any related industry certifications.
Years of Experience:
Minimum six (6) years of experience in information security.
Minimum two (2) years of project or team lead experience.
Credit Check: No
Valid/Unexpired Passport Book: no
Valid/Unexpired Driver's License: no
Master's degree in Computer Science or relevant field.
Preferred Requirements
Eight (8) or more years of cybersecurity experience, including time in a security operations center or incident response function.
Industry certification such as CISSP, GCIH, GCIA, GCFA, GSEC, CySA+, or vendor certification in EDR, SIEM, identity, or cloud security.
Experience building security automation and orchestration playbooks that integrate multiple tools through APIs.
Experience operating a threat intelligence program, including managing intelligence feeds, tracking threat actors relevant to the industry, and producing intelligence-driven detections.
Experience with detection-as-code practices: version control, peer review, and CI/CD pipelines for detection and automation content.
Experience integrating SAST, DAST, software composition analysis (SCA), and secrets scanning into CI/CD pipelines, including quality gates and build-breaking policy.
Experience with interactive application security testing (IAST), runtime application self-protection (RASP), API security testing, or bot and fraud mitigation capabilities layered with a WAF.
Secure code review ability in one or more languages used for web and API development, and familiarity with threat modeling for new features and services.
Experience with PCI DSS requirements applicable to public-facing web applications, including WAF or equivalent control requirements and application penetration testing obligations.
Cloud security experience in a major public c
[…]
y and applicable regulatory requirements.
Clear written and verbal communication skills, including the ability to document investigative findings for both technical and non-technical audiences.
Ability to participate in an on-call rotation and respond to security events outside normal business hours.
Other duties as assigned.
Physical Requirements
The Physical Demands and Work Environment described here are a representative of those that must be met by a Team Member to successfully perform the essential functions of the role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.
Physical Demands / Work Environment
Office - While performing the duties of this job, the Team Member is regularly required to stand, sit, talk, hear, see, reach, stoop, kneel, and use hands and fingers to operate a computer, key board, printer, and phone. May be required to lift, push, pull, or carry up to 20 lbs. May be required to work various shifts/days in a 24-hour situation. Regular attendance is a requirement of the role. Exposure to moderate noise (i.e. business office with computers, phones, printers, and foot traffic), temperature and light fluctuations. Ability to work in a confined area as well as the ability to sit at a computer terminal for an extended period of time. Some travel may be a requirement of the role.
Essential Services Provider
Allegiant as a national air carrier is deemed an essential service provider during declared national and state emergencies. Team Members will be required to report to their assigned trip or work location during national and state emergencies unless prohibited by local, state or federal order.
EEO Statement
We welcome all individuals from varied backgrounds and experiences to apply. Our company values the unique perspectives and talents that each person brings to our team.
Equal Opportunity Employer: Disability/Veteran
For more information, see https://allegiantair.jobs