Sr. Security Analyst

Bda · Woodinville, Washington, United States

// classified as

Other (Adjacent or hard to classify.)

> stack

sqlawselasticsearch

> description

<div class="content-intro">Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Microsoft, Nordstrom, Starbucks and the sports world, bringing energy, bold ideas and a willingness to dive into the unfamiliar. It's our people that make BDA the top global Merchandise Agency to work for.</div>Location:  <ul> <li style="font-family: Calibri; font-size: 11pt;">This role is based in Woodinville, WA and requires you to work onsite 4 days per week, with 1 day remote.</li> <li style="font-family: Calibri; font-size: 11pt;">To be considered, you must live within commuting distance, as regular in-person collaboration is a key part of the role.</li> </ul> Job Summary  BDA is looking for a Senior Security Analyst who can help us strengthen our security program and move from a primarily reactive approach to a more proactive, planned security strategy.  This role will have a strong focus on application, cloud, and infrastructure security. You will identify vulnerabilities, test applications and environments, evaluate potential exploits, and work closely with IT and business partners to reduce risk across the organization.  You will also have the opportunity to help define what the red-team security function looks like at BDA. We are open to an experienced mid-level professional who has strong application security skills and is ready to continue growing, as well as a more seasoned security professional seeking broad ownership and meaningful challenges.  What You’ll Do  <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Conduct vulnerability scans, penetration testing, and security assessments across applications, systems, cloud environments, and infrastructure. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Use tools including Tenable Nessus, Burp Suite, and CrowdStrike to identify vulnerabilities, investigate threats, and recommend remediation. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1">Test web applications to identify potential exploits, attack paths, and security weaknesses. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1">Evaluate the security of Linux-based and cloud environments, including AWS, OCI, and Azure. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Partner with infrastructure and engineering teams to improve system configurations, hardening standards, access controls, and overall security posture. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Monitor security events, investigate potential incidents, and support incident response and forensic activities. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1">Conduct account reviews, access reviews, risk assessments, and other security-related analysis. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Develop clear reports and recommendations for technical teams, business leaders, and executive stakeholders. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="9" data-aria-level="1">Help establish repeatable security processes, priorities, and testing practices that allow the organization to address risks proactively. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="10" data-aria-level="1">Collaborate with security team members, consultants, IT infrastructure, engineering, legal, compliance, and business teams across BDA. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="11" data-aria-level="1">Support the development and ongoing improvement of security policies, procedures, standards, and employee awareness initiatives. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="31" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="12" data-aria-level="1">Stay current on emerging threats, vulnerabilities, attack methods, and security best practices. </li> </ul> Required Qualifications  <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Professional experience in information security, application security, infrastructure security, or a closely related area. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1">Hands-on experience with all of the following: Microsoft Defender, Microsoft Purview, CrowdStrike, Tenable Nessus, and Burp Suite </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1">Proven experience with application and environment security, vulnerability testing, exploit testing, penetration testing, or vulnerability scanning. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Strong understanding of cloud security and experience securing environments such as AWS, OCI, or Azure. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Experience working with Linux environments and securing cloud-based or distributed infrastructure. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1">Knowledge of security frameworks and standards such as NIST, CIS, or ISO 27001. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Understanding of risk management practices and the ability to identify, prioritize, and communicate security risks. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="9" data-aria-level="1">Working knowledge of security technologies such as firewalls, IDS/IPS, endpoint security, SIEM, and enterprise intrusion-prevention systems. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="10" data-aria-level="1">Experience with system-hardening standards for servers, desktops, laptops, or network devices. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="11" data-aria-level="1">Understanding of malware, attack vectors, network threats, incident response, authentication, and access-control technologies. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="12" data-aria-level="1">Knowledge of internet protocols and security technologies, including HTTP, TLS, SSL, HTML, and XML. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="13" data-aria-level="1">Understanding of cloud, container-based, and virtualized architectures. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="14" data-aria-level="1">Knowledge of encryption techniques, standards, and appropriate encryption levels. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="15" data-aria-level="1">Strong analytical, problem-solving, and attention-to-detail skills. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="16" data-aria-level="1">Clear communication skills and the ability to work effectively across technical and nontechnical teams. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="32" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="17" data-aria-level="1">A collaborative and humble working style, with the ability to accept direction, execute priorities, and remain open to the perspectives of others. </li> </ul> Preferred Qualifications  <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Previous experience in an IT infrastructure, systems administration, networking, DevOps, or engineering role before moving into security. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Experience that combines technical security with governance, risk, compliance, or privacy responsibilities. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1">Familiarity with privacy regulations such as GDPR, CPRA, or CCPA. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1">Experience with firewalls, load balancers, web application firewalls, or VPN concentrators. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience with databases and related technologies such as Elasticsearch, SQL, or Oracle. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Experience handling and protecting information across different sensitivity levels. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1">Familiarity with standards or regulations such as FISMA, GLBA, FERPA, PCI DSS, ISO, or NIST. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Higher education or government information-security experience. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="9" data-aria-level="1">Security certifications such as CISSP, CISA, CISM, CEH, GWAPT, GPEN, CSFA, or similar credentials. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="10" data-aria-level="1">Experience with SUMO Cloud or comparable security monitoring and log-analysis tools. </li> </ul> Why This Role?  <ul> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="11" data-aria-level="1">This is an opportunity to do more than maintain an existing security program. You will help shape how BDA approaches red-team testing, vulnerability management, application security, and proactive risk reduction. </li> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="12" data-aria-level="1">You will join a close-knit security team of four that brings strong energy, collaboration, and long-standing knowledge of the organization. The team works across the entire business, giving you visibility into systems, applications, and risks that few other roles get to see. </li> <li data-leveltext="" data-font="Symbol" data-listid="33" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="13" data-aria-level="1">The work is broad, challenging, and rarely repetitive. You will have room to grow, opportunities to influence how the security function evolves, and the flexibility of a team that genuinely believes family comes first. </li> </ul>   Why BDA? BDA is a place where creativity, partnership, and customer care come together. For more than 40 years, we have helped some of the world’s most recognized brands create memorable experiences through branded merchandise, gifting, and custom programs. We are proud of the work we do, the relationships we build, and the people behind it all. At BDA, you will find a team that values collaboration, innovation, and a “get it done” mindset — while still making space for creativity, growth, and meaningful impact.  Our Core Values: <ul> <li>BDA is a Team and a Family</li> <li>Always Strive to Be The Best</li> <li>Entrepreneurial Spirit</li> <li>Tigger Attitude</li> <li>Work Hard, Play Hard</li> <li>Make It Happen the Best Way</li> <li>Total Client Affinity & Advocacy</li> </ul>  Want to learn more? So much to explore <ul> <li>BDA Instagram: <a href="https://www.instagram.com/bda_inc/">https://www.instagram.com/bda_inc/</a></li> <li>Harper + Scott (a BDA company): <a href="https://www.harperandscott.com/">https://www.harperandscott.com/</a> & <a href="https://www.instagram.com/harperandscott/">https://www.instagram.com/harperandscott/</a></li> <li>swagup (a BDA company) end-to-end Merch Ecommerce site: <a href="https://www.swagup.com/">https://www.swagup.com/</a></li> <li>Idea Planet (a BDA company): <a href="https://www.ideaplanetlp.com/about">https://www.ideaplanetlp.com/about</a></li> <li>BDA Careers Page: <a href="https://www.bdainc.com/careers/">https://www.bdainc.com/careers/</a></li> <li>LinkedIn – BDA page: <a href="https://www.linkedin.com/company/bdainc/">https://www.linkedin.com/company/bdainc/</a></li> </ul>   #LI-AH1 #LI-Hybrid We are pleased to share the base salary range for this position is $120,000 to $130,000. If you are hired at BDA, your compensation will be determined based on factors that may include geographic location, skills, education, and experience. In addition to these factors, we believe in the importance of pay equity and consider internal equity of our current team members as a part of any offer. In the spirit of pay transparency, the range listed is the full base salary range for the role and hiring at the top of the range would not be typical, in order to allow for future salary growth. The range listed is just one component of BDA’s total compensation and rewards programs, which includes: robust PTO; vacation, a paid volunteer day, holidays and summer Fridays, Benefits; medical, dental, vision, life, and AD&D insurance, 401k; tuition reimbursement, mental health and financial wellness programs and professional development opportunities including tuition reimbursement. Certain revenue-generating positions may be eligible for incentive compensation. <div class="content-conclusion"><div class="about-us-description ng-binding">BDA is more than a workplace - it’s a family. For more than four decades we’ve promoted a vibrant and welcoming culture that not only accepts but demands you to be different. The quirky, the bold, the creative and the unique make up the foundation of a company that the most iconic brands in the world look to help tell their story through the power of merchandise.</div> <div class="about-us-description ng-binding"> </div> <div class="about-us-description ng-binding">BDA Inc. is an Equal Opportunity Employer. We are committed to creating an inclusive workplace and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by federal, state, or local law. <a href="https://kraken-bdainc.icims.com/jobs/intro" target="_blank"> </a>Connect With Us! Not ready to apply? <a href="https://international-bdainc.icims.com/connect?back=intro&hashed=-435620418" target="_blank">Connect with us</a> for general consideration.</div> <div class="about-us-info-content hidden-xs"> <div class="about-us-more-info-title ng-scope">For more information:</div> <div class="about-us-more-info-content"><a class="ng-scope" href="https://www.bdainc.com" target="_blank">www.bdainc.com</a></div> <div class="about-us-more-info-content"> </div> <div class="about-us-more-info-content"> </div> <div class="about-us-more-info-content">For information about BDA's privacy policy for job applicants click <a class="c-link" href="https://www.bdainc.com/privacypolicy" target="_blank" data-stringify-link="https://nytco-assets.nytimes.com/2020/06/NYT_Applicant_Privacy_Policy.pdf" data-sk="tooltip_parent">here</a>.</div> <div class="about-us-more-info-content">Must be 18 years or older to apply.</div> </div></div>