Information Security Analyst II

KEY RESPONSIBILITIES:

• Monitor, analyze, investigate, and report on security events, alerts, vulnerabilities, and risks across the organization’s information systems.
• Independently perform incident response activities including triage, containment, eradication, recovery, root cause analysis, and post-incident reporting.
• Conduct advanced threat hunting activities to identify malicious activity, security gaps, and emerging threats.
• Perform vulnerability management activities including scanning, risk analysis, remediation planning, validation, and executive reporting.
• Develop and maintain security use cases, alerting logic, dashboards, correlation rules, and reporting within security monitoring platforms.
• Perform security reviews of infrastructure, cloud services, applications, and business systems to identify security risks and recommend corrective actions.
• Partner with IT teams to implement security controls, hardening standards, and remediation activities.
• Lead vendor security assessments and third-party risk evaluations.
• Assist with security governance initiatives including policy development, standards maintenance, risk assessments, and compliance activities.
• Evaluate emerging threats, vulnerabilities, and industry trends and recommend improvements to strengthen the organization's security posture.
• Participate in internal and external audits by gathering evidence, documenting controls, and validating security requirements.
• Develop security metrics, dashboards, and reporting for leadership.
• Lead security awareness and education initiatives throughout the organization.
• Assist in developing and maintaining incident response plans, playbooks, security procedures, and technical standards.
• Recommend and implement process improvements that enhance operational efficiency and reduce organizational risk.
• Participate in after-hours incident response as required.
• Perform other duties as assigned.

EDUCATION, TRAINING, AND EXPERIENCE:

Required

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or related field, or equivalent combination of education and experience.
• 3+ years of experience in information security, cybersecurity operations, security engineering, security administration, or related technical roles.
• Strong understanding of security frameworks, risk management methodologies, and cybersecurity best practices.
• Experience investigating cybersecurity incidents and conducting security event analysis.
• Experience with vulnerability management programs and remediation coordination.
• Experience supporting enterprise security technologies including SIEM, endpoint protection, email security, identity security, and network security controls.
• Working knowledge of cloud security concepts, Microsoft 365 security controls, identity and access management, and security monitoring practices.
• Experience documenting risks, findings, recommendations, and technical procedures.

Preferred

• One or more industry certifications such as:
  • Security+
  • GSEC
  • SSCP
  • CySA+
  • CISM
  • CISSP
  • CISA
  • GIAC certifications
• Experience with:
  • Microsoft Sentinel
  • Microsoft Defender suite
  • Vulnerability management platforms
  • Privileged Access Management (PAM)
  • Security automation and orchestration solutions
  • Cloud security platforms
  • Threat intelligence platforms
• Familiarity with:
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • ISO 27001
  • PCI-DSS
  • CPNI
  • SOC 2
• Experience conducting security assessments and risk reviews.
• Experience leading security projects and initiatives.

CAPABILITIES AND SKILLS:

• Strong analytical, investigative, and critical-thinking skills.
• Advanced ability to troubleshoot and analyze complex security issues.
• Ability to independently prioritize and manage multiple security initiatives.
• Strong written and verbal communication skills with both technical and non-technical audiences.
• Excellent presentation and documentation abilities.
• Ability to influence security decisions through education, collaboration, and risk-based recommendations.
• Strong organizational and project management skills.
• Ability to maintain confidentiality and handle sensitive information with discretion.
• Demonstrated leadership and mentoring skills.
• Commitment to continuous improvement and professional development.

WORKING CONDITIONS AND PHYSICAL REQUIREMENTS:

• Primarily indoor work in an office environment requiring extended periods of sitting.
• Frequent use of computer systems, security monitoring tools, and technical documentation.
• Occasional lifting of equipment up to 50 pounds.
• May require evening, weekend, or holiday work during security incidents or maintenance activities.
• Occasional travel may be required.
• Ability to respond to critical cybersecurity incidents outside normal business hours.