Security Analyst
Job Description
This role maintains visibility into potential threats and leading incident response efforts. This role supports the protection of the confidentiality, integrity, and availability of Council systems, applications, and data. The role collaborates with Information Security team members, IS teams, and business partners to investigate and respond to security incidents in alignment with Council policies, procedures, and standards. The role also supports vulnerability management activities by scanning systems, network devices, and applications to identify and prioritize vulnerabilities, and by coordinating remediation efforts with IS teams. The role provides direct support to business users, helping them remain productive while complying with security requirements.
Sample Tasks
- Maintain visibility into threats; produce reports and metrics for stakeholders.
- Respond to security tickets; provide direct support to business users, balance productivity with security requirements.
- Scan systems, devices, and applications for vulnerabilities; prioritize and coordinate remediation.
- Monitor and investigate alerts; lead incident response per policies, procedures, and standards.
- Document incidents, lessons learned, and playbooks; update detection content.
- Assist in control validation and compliance activities; track exceptions and risk treatments.
Qualifications
- Bachelor's degree
- 3 years of experience in Security role
- Experience with Microsoft 365 Defender and other endpoint security tools
- Skilled in reading and writing scripts using languages such as PowerShell and Python
- Knowledge of vulnerability management concepts, scoring, and prioritization