IT Security Analyst

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Oversee and assess activities across computer networks, systems, cloud platforms, and SaaS applications to detect suspicious behavior and potential security incidents.

• Set up and integrate IT systems and appliances into the enterprise SIEM, ensuring log collection validation and supporting detection and investigation efforts.

• Examine, investigate, and respond to alerts from SIEM, endpoint protection, firewalls, and identity and access management systems.

• Investigate and document routine to moderately complex security incidents, coordinating efforts for containment and remediation.

• Conduct vulnerability scanning, analysis, prioritization, reporting, and track remediation until closure.

• Collaborate with IT infrastructure teams to identify, evaluate, prioritize, and mitigate security risks related to networks, endpoints, cloud, and applications.

• Uphold and enforce internal IT security policies and procedures.

• Execute audit, compliance reviews, evidence collection, and control assessment activities.

• Manage and monitor security controls for firewalls, endpoint protection, encryption, identity and access management, MFA, and secure remote access.

• Assess user access, permissions, and privileged accounts to adhere to least-privilege and zero-trust principles.

• Promote security awareness initiatives and best practices in cybersecurity.

• Keep documentation updated for incidents, risks, procedures, control evidence, and remediation activities.

• Coordinate security tasks with external cybersecurity vendors and managed service providers.

• Stay informed on cybersecurity threats, vulnerabilities, trends, and regulatory requirements.

• Create and maintain metrics and reports related to alerts, vulnerabilities, incident response, compliance, and remediation progress.

• Perform additional duties as assigned.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline; or a comparable combination of education, certifications, training, and relevant work experience.

• 4+ years of pertinent work experience in IT security, cybersecurity operations, security operations, or a closely related technical security role.

• Practical experience in analyzing security events and alerts using SIEM platforms, endpoint detection and response tools, vulnerability scanners, firewalls, and ticketing systems.

• Proficiency in supporting identity, access, and endpoint security technologies, including Microsoft 365, Entra ID, SSO, MFA, endpoint management, or zero-trust initiatives.

• Familiarity with vulnerability management, security incident response, or security control administration.

• Understanding of networking principles, endpoint security, identity and access management, cloud services, and common cybersecurity controls.

• Knowledge of security incident response principles and processes, including investigation, escalation, containment, remediation, recovery, and documentation.

• Capability to independently analyze routine and moderately complex security alerts and events.

• Skill in assessing cybersecurity risks and prioritizing remediation efforts.

• Ability to analyze vulnerability findings and coordinate remediation until closure.

• Proficiency in developing and interpreting cybersecurity metrics, reports, and trend data.

• Competence in administering and monitoring assigned security technologies and controls.

• Ability to maintain accurate, complete, and audit-ready security documentation and control evidence.

• Capability to communicate cybersecurity risks, findings, and remediation needs to both technical and non-technical stakeholders.

• Some travel may be necessary (5%).

• Occasional weekend and extended hour work may be required.

• Professional cybersecurity certifications such as CompTIA Security+, CySA+, ISC2 SSCP, GIAC GSEC, Microsoft security certifications, or similar are preferred but not mandatory.

• Export-control authorization is required to access Part 810-controlled information; applicable Department of Energy authorization or licensing requirements apply.

🏝️ Benefits

• Competitive compensation packages.

• Medical, dental, and vision benefits for employees and their dependents.

• Paid vacation.

• 401(k) plan.

• Pre-tax health insurance, dependent care, and commuter benefits (FSA).