Information Security Analyst

We’re seeking a hands-on Information Security Engineer to support enterprise security operations across cloud and on-prem environments. This mid-level role focuses on implementing security controls, monitoring and responding to security events, and continuously improving identity, infrastructure, and endpoint security. The ideal candidate is technically curious, adaptable, and comfortable owning day-to-day security tasks while contributing to broader cybersecurity initiatives.

• Implement and maintain security controls across cloud and on-prem infrastructure
• Monitor SIEM and endpoint security tools; investigate alerts and support incident response
• Support vulnerability management, including scanning, triage, tracking, and remediation coordination
• Develop basic automation scripts and documentation to improve efficiency and consistency
• Collaborate with Infrastructure, Network, Dev Ops, and IT teams on secure configurations and best practices
• Participate in security assessments, patching cycles, and configuration reviews
• Assist with security tool evaluations and integrations under senior guidance
• Support compliance and audit efforts (ISO 27001, NIST, SOC)
• Contribute to reporting on risk trends, metrics, and overall security posture

• Bachelor’s degree in Computer Science, Information Security, or related field
• Security+, Microsoft Security, or GIAC associate-level certifications a plus
• Experience with SIEM, EDR, vulnerability management, and security monitoring tools
• Working knowledge of cloud security (Azure, AWS, or GCP)
• Basic scripting skills (Power Shell, Python, or Bash)
• Understanding of identity and access management, zero-trust concepts, and secure configuration practices

• Action-oriented with strong problem-solving skills
• Calm and effective under pressure
• Motivated self-learner with a passion for security