Job Information
Moody’s Analytics, Inc. Senior Risk Management Analyst in New York City, New York
Employer: Moody’s Analytics, Inc.Job Title: Senior Risk Management AnalystLocation: 7 World Trade Center, 250 Greenwich Street, New York, NY 10007 (Principal place of business - telecommuting permitted)Job Duties: Create system reports to analyze and summarize the trends. Report Ant anomalous activity and create risk assessment reports to identify initial risk and residual risk. Evaluate vulnerability scan utilizing various scanning tools to identify analyze and report to respective stakeholders. Apply common weakness enumeration and common vulnerability scoring system to perform vulnerability management. Perform investigation of security incidents, anomalies, and events and development of incident response procedure. Conduct thorough investigation to identify root cause of incident, which involves analyzing system logs, examining and reviewing configurations, and engaging various services, including cloud watch, cloud trail and AWS config for tracking changes. Communicate with relevant stakeholders, such as team members, management, customers or support personnel. Provide regular updates on incidents status, impact, and progress of review phase. Utilize various scanning tools for vulnerabilities. Use Synk and Netsparker to identify vulnerabilities in source code. Review DAST scan findings and provide insights that may only be detectable in a live environment. Work with clients on regular vendor due diligence assessments, including gathering information to meet contractual or service control obligation standards. Work with internal devops and engineering teams to develop and track remediation efforts against audit and customer obligation deficiencies. Review customer agreements where inclusion of SLA, Security compliance, and risk governance are proposed to ensure contract language is in line with current operating model. Telecommuting Permitted (100% telecommuting position. Will consider applicants resident in the continental U.S.).Requirements: Requires a Master’s degree or foreign equivalent in Computer Science, Information Security, or a related technical field plus two (2) years of experience as a Software Engineer, Systems Engineer, or in a related IT position performing information security risk management and architecture review. Full term of experience must include the following: conducting security assessments through vulnerability testing and risk analysis; analyzing security incidents to identify root cause, report on weaknesses and develop remediation strategies; working with network security tools, including firewalls/WAF, on public cloud infrastructure (AWS and Azure); developing and maintaining automation of security infrastructure using software programming languages, including Python, C, and infrastructure as code; assessing network security based on packet trace and application logs; and applying knowledge of WAF/DDoS technologies, PKI/DNS, and Cloud Policy Security. Telecommuting Permitted (100% telecommuting position. Will consider applicants resident in the continental U.S.).For US-based roles only: the anticipated hiring base salary range for this position is $114,795 - $134,400, depending on factors such as experience, education, level, skills, and location. This range is based on a full-time position. In addition to base salary, this role is eligible for incentive compensation. Moody’s also offers a competitive benefits package, including not but limited to medical, dental, vision, parental leave, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, a discounted employee stock purchase plan, and tuition reimbursement.To apply, please submit resume through careers.moodys.com, via e-mail at hrbox28@moodys.com, or by mail to: Moody’s Analytics, Inc., Attn: HR Box 28, 7 World Trade Center, 250 Greenwich Street, New York, NY 10007. Please refer to Job Ref. 5147.
Minimum Salary: 114975 Maximum Salary: 134400 Salary Unit: Yearly