Information Security Analyst

Role overview

Responsibilities

• Triage and investigate Defender XDR alerts and managed SOC/MDR escalations; respond to incidents through containment, evidence collection, root-cause analysis, and reporting.
• Analyze phishing and email threats, tune email controls, and hunt for threats using KQL and available telemetry.
• Manage vulnerability scanning, prioritization, remediation tracking, and exceptions; track penetration test and audit findings to verified closure.
• Monitor secure configuration across endpoints, identities, and cloud resources.
• Prepare evidence for IT examinations, audits, and regulatory reviews; maintain security policies, procedures, and exception records.
• Support data protection, security metrics, SOC report reviews, vendor risk documentation, awareness training, and phishing simulations.
• Advise teams on secure design and participate in business continuity and disaster recovery testing.

Qualifications

• At least three years in information security, security operations, or systems/network administration with significant security responsibilities.
• Hands-on Microsoft Defender XDR, Entra ID, and Intune experience; working knowledge of networking, firewalls, DNS, and TCP/IP.
• Understanding of incident response, vulnerability management, and common attack techniques such as MITRE ATT&CK.
• Strong written communication and discretion with confidential information.
• Regulated financial institution experience; listed frameworks, tools, scripting, Azure security, and certifications are preferred.

Tools and frameworks

• Microsoft Defender XDR, Entra ID, Intune, Azure, Defender for Cloud, and Microsoft Purview.
• KQL, PowerShell, Palo Alto, Zscaler, Mimecast, Nvendor, and Venminder are mentioned as experience areas or examples.
• Frameworks and guidance include NCUA, FFIEC, GLBA, NIST CSF, CIS Controls, FFIEC CAT, and CISA CPGs.

About NuMark