Fractional Cyber Security Analyst (Advisor Network)

Opportunity Overview

Arootah engages a curated network of senior operators to support clients across the alternative investment industry, including hedge funds, private equity firms, and family offices. Advisors are deployed on project-based engagements when client needs match their expertise. Joining the network does not guarantee placement; it provides access to opportunities as they arise.

Why Join the Arootah Network

• Alt-industry-only engagements with hedge funds, private equity firms, and family offices

• Project-based work that fits around existing commitments

• Client origination and engagement management handled by Arootah; advisors focus on delivery

About Arootah

Who We’re Looking For

Core Areas of Expertise

• Best practice reviews.
• Developing realistic and effective action plans.
• Breaking apart goals into actionable steps.
• Advising on vendor selection and oversight.
• Creating and implementing policies, procedures, and control measures.
• Evaluating each client’s advancement toward goal actualization through key performance indicators (KPIs) and scoring matrices.
• Special projects or other areas of need.
• Implement and assist with the day-to-day operations of securing the firm’s various information systems by providing technical expertise in all areas of network, system, and application security.
• Protect sensitive information by installing and configuring security software like firewalls and encryption programs.
• Monitor network traffic and analyze records like authentication logs to identify and investigate anomalies to prevent and detect security incidents.
• Lead the firm's vulnerability management program, conduct the annual cybersecurity assessments and penetration tests, and research and report on emerging threats, to help the firm take pre-emptive risk mitigation steps.
• Implement organization-wide security best practices to protect the business against existing, new, and emerging security threats.
• Test and analyze the organization’s business continuity and disaster recovery plan to ensure operations will continue in the event of a cyberattack or natural disaster.
• Assesses new security technologies to determine potential value for the firm.
• Execute and carry out firm incident response program to identify and prevent all potential breaches (internal or external), or misuse of data, that may occur.
• Review, investigate, and respond to real-time alerts within the environment.
• Generate real-time and historical reports for internal and external stakeholders regarding security and/or compliance violations.

What You Bring

• A Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Sciences, or a related field, with a strong academic record.
• One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC, GCIH, GNFA, GREM or other related SANS certifications.
• 5+ years of specific experience as a Cybersecurity Analyst at a hedge fund or family office.
• Working experience with one or more of the following technology vendors and products: Splunk Cloud, Rapid7 Nexpose Vulnerability Scanner, Sophos Antivirus, Varonis DatAlert, ForeScout CounterACT, or similar.
• Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.
• In-depth knowledge of security event management, network security monitoring, investigating common types of attacks, network packet analysis, log collection and analysis, and reviewing security events.
• Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO.
• Strong writing and presentation skills are requiredin order to communicate findings and recommendations, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff.

Important Note

This opportunity is to join Arootah’s advisor network and is not tied to a specific active engagement. Advisors are engaged on an as-needed basis, based on client demand and fit.