Information Systems Security Analyst

Essential Duties and Responsibilities

• Monitor security tools, dashboards, and alerts to identify and respond to threats in real time.
• Investigate and triage security events, escalating incidents when necessary.
• Conduct root-cause analysis and ensure proper remediation and documentation.
• Manage endpoint security policies, including antivirus, EDR/XDR, and patching compliance.
• Support vulnerability management programs by performing scans, analyzing results, and tracking remediation.
• Absorb internal and external security audits, assessments, and regulatory compliance efforts.
• Maintain and update security documentation, policies, and procedures.
• Evaluate third-party vendors for security risk and compliance requirements.
• Support identity and access management (IAM) processes, including provisioning/deprovisioning and periodic access reviews.
• Ensure proper enforcement of MFA, conditional access, and privileged account controls.
• Absorb security awareness content to educate employees on cybersecurity best practices.
• Contribute to ongoing improvement of security controls, monitoring, and reporting.
• Collaborate with IT, Operations, Compliance, and other teams to improve security posture.
• Participate in security-related projects including system hardening, tool deployment, and incident preparedness.
• Research and recommend new security tools, standards, and best practices.

Minimum Qualifications

• Must be able to obtain a state medical marijuana badge and pass a background check.
• Reliable transportation and valid driver’s license are required.
• Must be able to communicate with GDF Team effectively and professionally.
• Must perform under high pressure situations.
• Strong customer service orientation.
• Ability to work in a fast-paced environment and handle high stress situations.
• Self-Motivated.
• Ability to multitask.
• Excellent organizational skills.
• Ability to stay focused.
• Positive attitude and strong work ethic. Must be a team player with a “can do” attitude.
• Available to work weekends, after normal business hours, and holidays as needed.
• Reliable transportation and valid driver’s license are required.

Education & Experience Requirements

• Bachelor’s degree in information security, Computer Science, IT, or related field — or equivalent experience.
• 2+ years of experience in cybersecurity, information security, IT security operations, or related role.
• Knowledge of security principles, frameworks, and best practices (e.g., NIST, CIS, ISO 27001).
• Experience with security monitoring tools (SIEM, EDR/XDR, vulnerability scanners).
• Familiarity with IAM concepts and controls.
• Strong analytical, problem-solving, and incident response skills.
• Experience with cloud security such as Microsoft 365 and AWS.
• Preferred: Security-related certification(s) (Security+, CySA+, SSCP, GSEC)

Physical Requirements

• Must be able to lift and carry up to 50 pounds.
• Dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and other computer components
• The ability to respond quickly to sounds
• The ability to move safely over uneven terrain or in confined spaces
• The ability to see and respond to dangerous situations
• The ability to wear personal protective gear correctly most of the day
• The ability to sit or stand for up to 12 hours at a time
• The ability to work in bright/hot/humid conditions
• The ability to work in low light situations
• Lifting, standing, sitting, walking, bending, reaching, push/pull, repetitive use of hands, grasping use of hands, visual activity
• Exposure to limited hazardous chemicals