Sr Analyst Cyber Security

Academy Sports

17h•Onsite

About The Position

At Academy Sports + Outdoors our vision is to be the best sports + outdoors retailer in the country — but what truly sets us apart is our people. We’re a passionate, purpose-driven team that’s as committed to each other as we are to our customers. We’ve spent over 80 years building a culture that puts people first. We believe in creating opportunities for growth, fostering meaningful connections, and supporting every Team Member’s journey. What fuels us? Our belief in the power of fun. Here, you won’t just help customers gear up for their next adventure — you’ll launch one of your own. Whether you're starting out or leveling up, Academy is a place where fun can’t lose!

Requirements

Bachelor’s degree in Information Technology or relevant field of required
5+ years of experience in working in information security in an enterprise environment
Expert knowledge of Windows, Mac, Linux/Unix, and iSeries (AS400) Operating systems
Experience in conducting security assessments and analysis of applications and operating systems
Experience in providing cyber threat analysis to support and development teams
Deep understanding of analyzing and prioritizing application security, risk assessment, validation of security pen test results, and vulnerability resolution
Experience in collaborating with various levels of IT and management
Expert knowledge of database, networking, virtualization, and server hardware concepts
Master skills of endpoint security, threat management, and cyber security incident and response
Working experience on different types of Single-Sign-On (SSO), password reset, self-service, federated identity, multi-factor authentication (MFA), and IAM products and services, including Identity as a Service (IDaaS)
Demonstrated expert level experience with end point protection and vulnerability management tools, malware prevention tools and Antivirus solutions.
Demonstrated experience in configuration and management of security controls for Cloud Environments, IaaS, PaaS, and SaaS platforms.
Thorough understanding of network Protocols and Network Traffic Analysis, Firewalls, Intrusion Prevention Systems, Proxies, PKI and HSMs.
Expert skills/ability to analyze security systems logs, security tolls and data.
Ability to work with different teams on concurrent projects.
Ability to document project requirements, define KPIs and produce reports showing project progress.
Ability to communicate technical information to a non-technical audience.
Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels.
Thorough working knowledge of Windows Server 2003/2008/2012/ 2016, Unix, Mac and Windows 10.
Ability to remain organized, pay attention to detail, and meet critical deadlines.
Analytical with strong problem-solving abilities and creative resolution skills.
Ability to work well under pressure while consistently meeting time sensitive deadlines.
Acceptable level of hearing and vision to perform job duties.
Adhere to company work hours, policies, procedures, and rules governing professional staff behavior.
Regular in office attendance is required.
Full time

Nice To Haves

Preferred; industry certifications in areas such as AWS, Certified Cloud Architect (CCA), Certificate of Cloud Security Knowledge (CCSK), and/or CISSP, CEH, CCNA and CompTIA Cloud+
Experience with application support and system trouble shooting preferred
Experience with offshore teams preferred

Responsibilities

Support enterprise-wide vulnerability management program and remediation efforts.
Perform advanced threat analysis and modeling to ensure controls in place continue to provide the needed coverage for the enterprise.
Implement and manage security controls to ensure the continued protection of the enterprise.
Complete and close assigned IT tickets for vulnerability remediation and end point protection.
Serves as IT Security SME for business and IT Project and other Initiatives.
Support Cloud initiatives by providing security recommendations and implement controls to protect IT assets in the Public cloud.
Perform Application security reviews for web and mobile applications.
Participate as key resource in CSIRT activities and investigation.
Collaborate with the IT security & Compliance Team to deliver holistic solutions.
Present solutions to various levels of management.