Senior Specialist, IT Security Analyst

Position Summary

The Security Analyst supports the organization’s Information Security program by monitoring security tools, reviewing alerts, investigating basic security events, and assisting in the protection of systems, data, and users. This role performs routine security operations tasks, conducts initial analysis of threats and vulnerabilities, supports identity and access management processes, and contributes to security awareness efforts. The Security Analyst works closely with senior team members and the Managed Security Services Provider (MSSP) to escalate issues appropriately and ensure the effectiveness of security controls.

Duties and Responsibilities

• Monitor and triage alerts from security tools (SIEM, EDR/XDR, firewalls, email security, cloud security platforms)
• Conduct initial investigation and documentation of potential security incidents and escalate as needed
• Aid with identity and access management tasks, including user provisioning, access reviews, and MFA/SSO support
• Support vulnerability scanning cycles and help track remediation progress
• Perform routine security checks to ensure tools and controls are functioning as expected
• Aid with researching new threats, vulnerabilities, and security best practices
• Support security awareness initiatives and phishing simulation programs
• Participate in security incident response activities under guidance from senior staff
• Aid in maintaining security documentation, policies, procedures, and reports
• Collaborate with IT teams and the MSSP to resolve security-related tickets and inquiries
• Assist in maintaining security documentation, policies, procedures, and reports
• Collaborate with IT teams and the MSSP to resolve security-related tickets and inquiries
• Work closely with our Managed Security Services Provider (MSSP) and IT teams to review alerts and investigate security incidents
• 24/7 Availability for Identity & Access Management, Security Incident Response and Escalation

Qualifications

• Minimum 2+ years in IT; experience in cybersecurity strongly preferred.
• Exposure to or hands-on experience with:
• EDR/EXR
• Network/security fundamentals (firewalls, DNS security, content filtering)
• Email security and phishing protection
• Identity and Access Management, MFA/SSO
• M365 and Azure security features
• Familiarity with:
• Vulnerability scanning tools
• SIEM monitoring and event triage
• Basic incident response process
• Relevant and Current Certifications Preferred: e.g., CompTIA Security+, Azure Security Engineer, CCNA security.

Working Conditions

• Ability to thrive in a remote environment
• Some travel required.
• Requires work outside a traditional Monday – Friday work week, and normal business hours.

What We Offer

• Comprehensive benefit package, effective day 1: Medical, Vision*, Dental*, Wellness
• Competitive compensation with annual incentive potential
• Health Savings Account and Flexible Spending Account Options
• Health Reimbursement Account fully funded by Make-A-Wish America
• Short Term Disability*, Long Term Disability* and Life Insurance
• Additional Insurance Plans: Accident, Critical Illness, Hospital Indemnity, Pet Insurance through Figo
• 401(k) Retirement Savings Plan with 5% match after one year of service
• Eligibility for student loan forgiveness through the Public Service Loan Forgiveness Program
• The organization will send a laptop, 24” monitor, and a docking station/adaptor to new hires
• Time Off: Competitive PTO starting at 15 days, with enhanced time off for senior roles
• 10 Sick Days
• 11 Paid Holidays
• 2 Volunteer Days after one year of service
• 2 Personal Days accrued annually
• Parental Leave
• Employee Awards and Recognition Programs
• Individual and Leadership Development
• Discounts and special offers for theme parks, events, hotels, concerts, and movie tickets
• *Monthly premiums paid for the employee for vision, dental, and short/long term disability.