IT Security Analyst

Job Summary

We are seeking an IT Security Analyst responsible for protecting and strengthening the organization’s IT infrastructure while serving as a key liaison between IT Security and the business. This role focuses on risk identification and mitigation through business impact assessments, security awareness initiatives, and the implementation of technical and procedural controls, with an emphasis on business continuity and disaster recovery. Responsibilities include monitoring, investigating, and responding to security threats across the organization. The ideal candidate has hands-on experience with a variety of industry standard tools with a strong understanding of IT infrastructure, excellent analytical and communication skills, and a service-oriented mindset. The candidate will also assist with escalated issue resolution by providing in-person hands-on support to end users as needed.

Description

Primary duties and responsibilities include the following (other duties may be assigned)

• Support the development and testing of business continuity and disaster recovery plans, including coordinating and documenting tabletop exercises and assisting with staff training to ensure readiness during disruptive events.
• Conduct risk assessments and business impact analyses for assigned business areas to identify potential threats and operational impacts.
• Monitor security alerts and events using SIEM platforms and endpoint detection tools, escalating incidents as appropriate.
• Investigate and respond to security incidents such as phishing attempts, malware infections, and unauthorized access, following established incident response procedures.
• Analyze logs from network, endpoint, and identity systems to identify indicators of suspicious or malicious activity.
• Participate in threat hunting activities and proactive vulnerability assessments and work with IT to remediate identified risks.
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks.
• Generate routine reports on security events, trends, and operational metrics for internal stakeholders.
• Support collaboration between technical teams and business stakeholders by helping translate security requirements into practical, business‑friendly guidance.
• Research emerging cybersecurity technologies and assist in evaluating third‑party security tools and vendors to support business needs.
• Work with third‑party vendors under guidance to support integrations, issue resolution, and service delivery.
• Provide helpdesk coverage and respond to escalated user issues as required, including participation in scheduled after‑hours on‑call support.
• Stay current on emerging threats, vulnerabilities, and security best practices to continuously develop skills and improve the organization’s security posture.
• Provide IT Manager on Duty coverage, both on site and remote on call, on a rotating shared basis to cover defined hours of operation.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or information security roles.
• Strong analytical thinking, and the ability to spot patterns and trends.
• Ability to work independently and as part of a team.
• Familiarity with business continuity, risk assessment, and disaster recovery frameworks such as NIST, ISO27001, SOC2.
• Proficiency in documentation and process development.
• Understanding of how IT and security can enable business operations.
• Technical skillset to configure security tools and systems.
• Knowledge of IT infrastructure concepts.
• Self-motivation and accountability for ensuring service levels are achieved/exceeded.
• Flexible schedule with some travel required.

Benefits

• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Paid holidays

Salary

$90,000 – $100,000 annually