Information Security Analyst I

Role overview

Ideal candidate

• The employer seeks an early-career information security professional or someone with technical IT services experience.
• Candidates should have IT discipline experience, security configuration experience, and familiarity with configuration documents, alerts, and log data.
• Experience testing platform upgrades or software rollouts is sought.
• The candidate should be resourceful, able to make sound decisions and manage initiatives, and interested in continuous learning.

Job qualifications

• A technical STEM degree or one year of experience in a technical role is required.
• Experience with systems and software in the assigned technology domain is preferred.
• Knowledge of Windows and Linux operating systems, server and desktop administration, troubleshooting, and user support is preferred.
• Knowledge of user and role administration, permissions, authentication, authorization, and user provisioning is preferred.
• Systems administration and patching experience, including change tracking and security reporting, is preferred.
• The source also lists Windows virtual desktop environments, Windows server infrastructure, and VMware, but the qualification is truncated.

Essential duties

• Respond to alerts from SIEM, firewall/proxy, AV/EDR, IDS/IPS, email security gateways, password vaults, and other systems.
• Support vendor onboarding and management in the VRM portal, including stakeholder concerns and IRQ assessments.
• Administer security program technology and provide first-line support; assist with investigations and incident response.
• Troubleshoot applications, servers, and security services, and write knowledge articles documenting findings.
• Maintain access management systems, assist with upgrades and feature planning, and back up senior staff on PAM tasks.
• Assist with audit, data governance, access review, and compliance work.
• Patch, maintain, and support security systems under senior staff guidance; evaluate and mitigate vulnerabilities.
• Participate in disaster recovery testing, projects, system integrations, application upgrades, and vendor security reviews.
• Research and test work independently, gather evidence, support stakeholders, and identify improvements to confidentiality, integrity, and availability.