IT Security Analyst

About the Role

The IT Security Analyst will work closely with the IT management team, legal, compliance, and other applicable teams to manage vulnerability exposures and ensure the enforcement of security policies and procedures. The ideal candidate will have a solid background in IT Security, with experience in anti-malware, EDR/XDR, and similar platforms. The ability to work independently and as part of a team is essential, as well as excellent communication skills to explain complex ideas and concepts to both technical and non-technical audiences.

The role is based in the United States, and the company offers a range of benefits, including robust healthcare and benefits, flexible spending accounts, and a 401(k) safe harbor retirement plan with employer match.

What You Will Do

• Monitor, manage, and administer IT Security specific technical control solutions, such as content filtering, IDS/IPS, firewall, and endpoint protection
• Assess vulnerabilities and incidents using enterprise SIEM, forensics tools, and vulnerability scanning tools
• Monitor and respond to information security issues related to systems and workflow
• Enforce security policies and procedures by administering and monitoring security profiles
• Review security violation reports and investigate possible security exceptions
• Update, maintain, and document security controls
• Coordinate response to information security incidents
• Collaborate with IT management, legal, compliance, and other applicable teams to manage vulnerability exposures
• Assist in the development and implementation of security policies and procedures
• Create, manage, and maintain user security awareness
• Conduct security research to stay up-to-date with the latest security issues
• Evaluate products and procedures to enhance productivity and effectiveness

What We Are Looking For

• 5 years of experience in an IT role
• 3 years of IT Security experience
• Experience with anti-malware, EDR/XDR, and similar platforms
• Threat hunting and cyber investigations experience
• Experience with endpoint and network security monitoring
• Containing and remediating cybersecurity incidents
• Solid skills with Windows and Linux
• Ability to work both independently and as part of a team
• Knowledge of common adversary tactics and techniques, such as obfuscation, persistence, and defense evasion
• Basic understanding of network traffic analysis, including TCP/IP, routing, switching, and protocols
• Demonstrated ability to explain complex ideas and concepts both verbally and in writing to technical and non-technical audiences

Nice to Have

• Experience with Cloud Security
• Experience with Microsoft 365 security
• Direct experience using scripting languages to automate tasks and manipulate data
• Experience in the Healthcare industry

Benefits and Perks

• Robust healthcare and benefits, including medical, dental, and vision
• Flexible spending accounts, including medical, transit, and dependent care
• Employer-paid life insurance and AD&D coverages
• Health savings account paired with a low-cost high-deductible medical plan
• 401(k) safe harbor retirement plan with employer match
• Opportunity to work with a leading company in the industry
• Collaborative and inclusive work environment
• Professional development opportunities
• Flexible work arrangements, including remote work options

• Make sure you have a strong understanding of IT Security principles, including security policies and procedures, threat hunting, and cyber investigations.
• Highlight your experience with anti-malware, EDR/XDR, and similar platforms in your resume and cover letter.
• Be prepared to explain complex security concepts in simple terms, both verbally and in writing.
• Show a willingness to stay up-to-date with the latest security issues and technologies.
• Demonstrate your ability to work independently and as part of a team, and highlight your excellent communication skills.
• Research the company and its culture to understand their values and mission, and be prepared to discuss how you can contribute to it.
• Be prepared to provide examples of your experience with endpoint and network security monitoring, and containing and remediating cybersecurity incidents.