Senior Specialist, IT Security Analyst

Position Summary:

The Security Analyst supports the organization’s Information Security program by monitoring security tools, reviewing alerts, investigating basic security events, and assisting in the protection of systems, data, and users. This role performs routine security operations tasks, conducts initial analysis of threats and vulnerabilities, supports identity and access management processes, and contributes to security awareness efforts. The Security Analyst works closely with senior team members and the Managed Security Services Provider (MSSP) to escalate issues appropriately and ensure the effectiveness of security controls.

Knowledge and Abilities:

• Demonstrated successful problem-solving abilities
• Foundational understanding of cybersecurity principles, threats, and best practices
• Basic knowledge of networks, systems, cloud environments, and endpoint security tools
• Critical thinking and analytical skills to identify and investigate suspicious activity
• Strong written and verbal communication skills
• Ability to follow procedures, document findings, and support incident response activities
• Strong organizational skills and attention to detail
• Ability to prioritize tasks and meet deadlines
• Ability to engage professionally across teams and levels of the organization

Duties and Responsibilities:

• Monitor and triage alerts from security tools (SIEM, EDR/XDR, firewalls, email security, cloud security platforms)
• Conduct initial investigation and documentation of potential security incidents and escalate as needed
• Assist with identity and access management tasks, including user provisioning, access reviews, and MFA/SSO support
• Support vulnerability scanning cycles and help track remediation progress
• Perform routine security checks to ensure tools and controls are functioning as expected
• Assist with researching new threats, vulnerabilities, and security best practices
• Support security awareness initiatives and phishing simulation programs
• Participate in security incident response activities under guidance from senior staff
• Assist in maintaining security documentation, policies, procedures, and reports
• Collaborate with IT teams and the MSSP to resolve security-related tickets and inquiries
• Support configuration and tuning of existing security solutions under supervision
• Work closely with our Managed Security Services Provider (MSSP) and IT teams to review alerts and investigate security incidents
• 24/7 Availability for Identity & Access Management, Security Incident Response and Escalation
• Performs other related job duties, as assigned

Qualifications:

• Minimum 2+ years in IT; experience in cybersecurity strongly preferred.
• Exposure to or hands-on experience with:
  • EDR/EXR
  • Network/security fundamentals (firewalls, DNS security, content filtering)
  • Email security and phishing protection
  • Identity and Access Management, MFA/SSO
  • M365 and Azure security features
• Familiarity with:
  • Vulnerability scanning tools
  • SIEM monitoring and event triage
  • Basic incident response process
• Relevant and Current Certifications Preferred: e.g., CompTIA Security+, Azure Security Engineer, CCNA security.

Working Conditions:

• Ability to thrive in a remote environment
• Some travel required.
• Requires work outside a traditional Monday – Friday work week, and normal business hours.