Senior Security Analyst
U.S.A.

We`re seeking a creative Senior Security Analyst driven by intellectual curiosity to help us improve the security of our systems. Security is a broad and dynamic specialty touching on nearly every aspect of information systems. We are looking for an intelligent person who is able to see problems from unique perspectives and propose effective solutions. The ideal person for this role is someone passionate about determining the source of potential problems who will offer inventive ways to remedy shortcomings and improve existing processes.

As Senior Security Analyst you will design flexible and realistic solutions while balancing business needs against real security and privacy threats. These solutions will involve creative use of human resources, ongoing internal awareness training, as well as the hardware and software necessary to maintain the firm`s well-being. You will work directly with network groups, programming groups, and end-users to formulate action plans.

The Senior Security Analyst will evaluate the Morningstar intranet infrastructure, internal LAN, VPN, and Web-based applications to determine potential short- and long-term security vulnerabilities. This person will develop the overall corporate technical security plan, as well as policies and procedures for Morningstar global operations infrastructure. The Senior Security Analyst will also maintain Morningstar security posture with regular testing, evaluations, and hands-on implementation and deployment. This role will lead training within the firm both at a technical and end-user level.

The ideal candidate will possess the ability to balance business objectives and technical requirements, a knack for quantifying risk and recommending practical approaches, and a willingness to jump in where needed to get the job done. Three to five years of direct, hands-on systems security experience with the following technologies is required: particular strength in application development and security evaluation; Microsoft products including SQL Server, Windows NT/2000/XP, IIS, and Exchange 2000; Web technologies (Java, XML, ASP); Cisco products including routers, switches, and PIX firewall; Linux, Unix and Solaris platforms; and Novell Netware 5.0. A bachelor`s degree in engineering or computer science is required. CISA/CISSP is strongly preferred. Industry certifications from Microsoft, Cisco, Novell, and Sun with a concentration in security training are all desirable.

Morningstar is an equal opportunity employer.