IT Security Analyst

IT Security Analyst

Direct Hire

Addison, TX (Hybrid) - Base + Bonus + Full Benefits

The Security Analyst is responsible for monitoring, protecting, and continuously improving the organization’s information security environment. This role focuses on hands‑on security operations, policy execution, and technical initiatives to safeguard systems, data, and infrastructure. The Security Analyst works closely with IT and business stakeholders to identify and mitigate risks, support compliance efforts, and operate security tools and processes. This position contributes to advancing the maturity of the cybersecurity program while supporting secure collaboration across on‑site and remote teams.

• Monitor and review corporate infrastructure (network, hardware, and cloud) for security risks, vulnerabilities, and performance trends.
• Perform and support vulnerability assessments and penetration testing (internal and external), producing actionable findings and remediation recommendations.
• Review compliance scan results (e.g., Nessus) and validate remediation of findings and system patches.
• Implement and maintain security controls, policies, and best practices across IT systems.
• Coordinate with third‑party vendors to support adherence to organizational security standards.
• Collaborate with IT teams to identify, evaluate, and respond to emerging security threats.
• Support SOX compliance efforts by maintaining IT controls, evidence, and documentation.
• Maintain security configurations for cloud infrastructure, including enforcing and auditing conditional access policies.
• Plan and execute attack simulations and phishing tests to assess security readiness and improve response strategies.
• Utilize SIEM, MDR, and endpoint protection tools (e.g., Huntress, Threat Locker) to enhance threat detection and response.
• Develop, maintain, and execute incident response and disaster recovery procedures as needed.
• Prepare periodic security summaries, metrics, and reports with findings and recommendations.
• Identify opportunities to automate manual monitoring, alerting, or reporting tasks.
• Partner with IT and business teams on projects that impact system and data security.
• Support IT General Controls for enterprise systems and respond to internal and external audit inquiries.
• Assist with annual reviews of IT controls, narratives, and process documentation.
• Support PCI‑DSS annual assessments with external assessors and maintain compliance documentation.
• Participate in annual penetration testing activities and track remediation of findings.
• Perform additional duties as assigned based on organizational needs.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 4‑6 years of experience in information security, infrastructure, or related technology roles.
• Hands‑on experience supporting security operations, controls, or compliance initiatives.
• Relevant certifications such as CISSP, CySA+, CEH, or CISM preferred.
• Strong understanding of network and cloud security risks and controls.
• Working knowledge of security frameworks such as NIST and ISO 27001.
• Strong analytical, problem‑solving, and communication skills.
• Ability to collaborate effectively with both technical and non‑technical stakeholders.
• Highly organized with the ability to manage multiple priorities in a fast‑paced environment.
• Demonstrated ability to handle sensitive information with discretion and confidentiality.
• Experience using SIEM, MDR, and vulnerability scanning tools for threat detection and response.
• Experience supporting enterprise‑scale IT or security initiatives.
• Strong attention to detail and adaptability in evolving environments.
• Excellent documentation and reporting skills.
• Familiarity with security automation and monitoring platforms.
• Proficiency with tools such as Nessus, Huntress, and Threat Locker to strengthen cybersecurity posture.

Estimated Min Rate: $94,500.00

Estimated Max Rate: $

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals…