Sr. Information Security Analyst

Everything we do at Sunrun is driven by a determination to transform the way we power our lives. We know that starts at the individual employee level. We strive to foster an environment you can thrive in through our commitment to diversity, inclusion and belonging.

Who We Are

Sunrun is on a mission to make solar energy affordable for more people. We help people upgrade their home to solar energy without the big upfront costs. Sunrun is dedicated residential solar company in the country and has a mission to bring clean, solar power service to the masses.

The Sr. Information Security Analyst reports to Sunrun’s Lehi, UT office. Telecommuting is an option for this position. Salary offered: $131,250/yr.

Responsibilities:

• Analyze management and technical controls to ensure that specific security and compliance requirements are met through the verification of documented processes, procedures and standards in order to validate maintenance of secure configurations and map them across the information security framework to identify overlapping requirements and compliance efficiencies (30% of the time).

• Perform risk assessments and execute tests of data processing systems to ensure functioning of data processing activities and security measures (35% of the time). Train users and promote security awareness to ensure system security and to improve server and network efficiency (10% of the time).

• Monitor use of data files and regulate access to safeguard information in computer files (5% of the time).

• Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs (10% of the time).

• Monitor security incidents and investigate potential breaches of security (10% of the time).

Requirements:

• Master’s in Security Informatics, Cybersecurity, or Information Security

• 5 y. exp. as an Information Security Analyst using the following tools:

  • Rapid7 InsightVM

  • SumoLogic (SIEM)

  • Mimecast

  • AWS

  • Google GCP

  • Microsoft Office 365

  • Logrhythm (SIEM)

  • Proofpoint

  • Wombat Security Awareness

  • Wireshark

  • Nmap

  • Splunk Enterprise 8.0 System Administration

  • Splunk Enterprise Security 6.0

  •  Splunk 8.0 Fundamentals Part 1 and 2

  • SANS GDSA

  • LogRhythm Administrator Global Administrator

  • Firewall reviews, AD Security Assessment, Penetration Tests and Cloud Security Assessment

  • Develop hardening standards for Windows and Linux servers and desktops

  • Assess code-level vulnerabilities using Python scripting and open source tools

  • Microsoft Suite

  • Confluence/JIRA

Recruiter:

This description sets forth the general nature and level of the qualifications and duties required of employees in this job classification, as well as some of the essential functions of this role.  It is not designed to be a comprehensive inventory of all essential duties and qualifications. If you have a disability or special need that may require reasonable accommodation in order to participate in the hiring process or to perform this role if you are offered employment, please let us know by contacting us at candidateaccomodations@sunrun.com.

Sunrun is proud to be an equal opportunity employer that does not tolerate discrimination or harassment of any kind. Our commitment to Diversity, Inclusion & Belonging drives our ability to build diverse teams and develop inclusive work environments. At Sunrun, we believe that empowering people and valuing their differences will help us create a planet run by the sun for everyone. We are committed to equal employment opportunities without consideration of race, color, religion, ethnicity, citizenship, political activity or affiliation, marital status, age, national origin, ancestry, disability, veteran status, sexual orientation, gender identity, gender expression, sex or gender, pregnancy or any other basis protected by law. We also consider qualified applicants with criminal convictions, consistent with applicable federal, state and local law.