IT Security Analyst

This is a fully remote position, open to applicants in Florida.

📋 Description

• Oversee and prioritize security alerts related to suspicious sign-ins, malware, phishing attempts, endpoint activities, email threats, administrative alterations, and any unusual network or cloud behaviors.

• Investigate phishing messages reported by users, analyze indicators, identify similar communications, and manage their quarantine or removal.

• Assist in conducting identity and access reviews, focusing on inactive, vendor, and privileged accounts, MFA enrollment, Conditional Access, suspicious sign-ins, and mailbox rules.

• Monitor compliance and coverage of endpoint security, collaborating with IT Operations for remediation efforts.

• Analyze vulnerability and patch-compliance reports, prioritize issues, create remediation tickets, and verify their completion.

• Review security findings from Microsoft 365, Azure, and AWS concerning sharing, guest access, logging, encryption, and least-privilege controls.

• Contribute to security awareness training, phishing simulations, follow-ups with employees, and trend reporting.

• Support incident response efforts by collecting evidence, documenting timelines, executing approved containment actions, and tracking action items.

• Maintain security documentation and gather evidence for audits, client questionnaires, compliance assessments, and governance reporting.

• Assist with the administration of physical security and conduct periodic access reviews for Brivo and ADT.

• Prepare security updates, alert summaries, incident documentation, and compliance reports for leadership evaluation.

• Conduct initial analyses, document findings, coordinate routine remediation, and escalate high-risk or business-critical issues.

⛳️ Requirements

• Between one to three years of experience in cybersecurity, IT support, security operations, infrastructure support, audit support, or a similar technical position.

• Proficient understanding of Windows endpoints, Microsoft 365, phishing analysis, vulnerability management, security alerts, and ticketing workflows.

• Capability to review logs and technical findings, adhere to established procedures, document conclusions, and escalate issues as needed.

• Strong attention to detail and organizational abilities, especially in maintaining evidence for audit, compliance, and governance objectives.

• Excellent written and verbal communication skills.

• Preferred experience with Microsoft Sentinel, Microsoft Defender, Entra ID, Intune, Proofpoint, SentinelOne, Nessus, Fortinet, DNSFilter, Brivo, ADT, or similar technologies.

• Familiarity with NIST CSF, CIS Controls, SOC 2, or the GLBA Safeguards Rule is preferred.

• Preferred experience in supporting phishing investigations, vulnerability remediation, access reviews, endpoint security, cloud security, or physical access management.

• Security+, CySA+, SC-200, AZ-900, MS-900, or equivalent certification preferred but not mandatory.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Company-paid life insurance.

• Short-term and long-term disability coverage.

• Generous PTO and paid holidays.

• Opportunities for professional development.

• Employee recognition initiatives.

• Wellness resources and an employee assistance program (EAP).

• Employee referral program with bonus incentives.