IT Security Analyst – US

About the role

The IT Security Analyst supports the day-to-day operation and monitoring of the company's cybersecurity environment. This role reviews security alerts, assists with security investigations and incident response, supports vulnerability and remediation activities, and helps maintain security tools, documentation, and processes. The IT Security Analyst works closely with the Cybersecurity team, Infrastructure, IT Operations, Applications, managed security providers, and other business partners. The role is responsible for assigned security activities and routine administration of security tools, while escalating complex issues and higher-risk events to senior cybersecurity staff.

Responsibilities

• Monitor security alerts and activity using security tools such as SIEM, EDR/XDR, identity, email, cloud, and other cybersecurity platforms.
• Perform initial review and triage of security alerts, gather relevant information, document findings, and escalate issues as appropriate.
• Assist with security investigations and incident response activities, including information gathering, remediation tracking, and follow-up.
• Work with managed SOC/MDR providers and internal IT teams to investigate and resolve assigned security alerts and issues.
• Maintain security incident documentation, procedures, and assigned response documentation.
• Support the day-to-day administration, monitoring, and routine configuration of assigned cybersecurity tools.
• Assist with reviewing security tool alerts, dashboards, logs, and system health.
• Help troubleshoot security tool issues, integrations, and configuration concerns.
• Assist with testing security-control changes and maintaining related documentation and records.
• Review vulnerability and security assessment findings and assist with tracking remediation activities.
• Work with technology owners to follow up on assigned vulnerabilities and overdue remediation items.
• Assist with validating that identified security issues have been addressed through rescans, configuration checks, or other documented methods.
• Support security assessments, audits, control testing, and evidence collection as needed.
• Assist with tracking security risks and maintaining accurate records of remediation activities.
• Maintain security reports, dashboards, metrics, and documentation for assigned areas.
• Assist with recurring security reviews and other cybersecurity activities.
• Use basic scripting, queries, or automation tools to improve routine security tasks when appropriate.
• Participate in cybersecurity projects, tabletop exercises, security awareness activities, and technology evaluations as assigned.
• Communicate status, issues, and potential risks to the appropriate team members.

Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and relevant professional background.
• 2–3+ years in information technology or cybersecurity, including security operations, security administration, IT support, systems administration, network administration, or a related technical function.
• Familiarity with cybersecurity tools such as SIEM, EDR/XDR, vulnerability management, identity security, email security, or similar platforms.
• Basic understanding of Windows and/or Linux systems, networking, identity and access management, cloud services, and common enterprise technologies.
• Ability to review security alerts, troubleshoot technical issues, document findings, and escalate concerns appropriately.
• Understanding of cybersecurity concepts, vulnerability management, security controls, and incident response.
• Familiarity with security frameworks or practices such as NIST CSF or CIS Controls is preferred.
• Strong organizational, written, and verbal communication skills.
• Ability to manage multiple priorities, work collaboratively with technical teams, and follow established procedures.

Qualifications