Security Analyst - 100% onsite

Looking for a Senior Security Analyst. The Senior Security Analyst is responsible for protecting the organization s systems, networks, identities, and data through continuous monitoring, incident response, and proactive security improvements. This role works closely with IT Operations, Networking, Infrastructure, and Application teams to detect threats, investigate security events, reduce risk, and help design secure enterprise solutions.

The ideal candidate has 8 10 years of progressive IT experience, including 5 or more years of direct information security experience, with strong technical depth and the ability to operate independently in complex enterprise environments.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

Security Operations & Monitoring oMonitor security alerts, logs, and telemetry for indicators of compromise, malicious behavior, anomalous activity, or policy violations. oLead investigation and response to security incidents involving endpoints, servers, network infrastructure, identity platforms, and cloud services. oPerform incident triage, containment, remediation coordination, and post-incident analysis. oManage, tune, and improve security monitoring tools, including SIEM, IDS/IPS, EDR/XDR, NetFlow analyzers, and log aggregation platforms. oAnalyze phishing attempts and suspicious email activity, including header analysis and email flow troubleshooting. oMaintain and review web and content filtering platforms, assessing risk related to URLs, domains, and external services.

Network & Infrastructure Security oPartner with Networking and IT Operations teams to troubleshoot and resolve security-related connectivity, routing, or authentication issues. oMaintain and improve secure configurations for firewalls, VPNs, load balancers, and cloud connectivity. oSupport DDoS detection, mitigation coordination, and response activities. oMaintain DNS security hygiene, including name resolution integrity and protection against DNS-based attacks. oSupport secure traffic distribution using load balancing or DNS traffic management technologies (e.g., F5 or similar platforms).

Identity & Access Security oSupport Active Directory, Azure AD, ADFS, and related identity platforms from a security perspective. oInvestigate authentication anomalies, account misuse, and privileged access issues. oHelp enforce identity security best practices, including least privilege, access reviews, and monitoring.

Vulnerability & Patch Management oAnalyze security advisories, CVEs, and vendor bulletins affecting infrastructure, operating systems, and enterprise applications. oValidate and track patch deployment across servers, endpoints, network devices, and security appliances. oCoordinate with infrastructure, endpoint, and SCCM teams to align patching with risk and business priorities.

Incident Response & Forensics oPerform security investigations using log analysis, endpoint data, and network evidence. oConduct packet captures, log correlation, and threat hunting activities. oIdentify root causes of security incidents and recommend long-term mitigation strategies. oDocument findings, lessons learned, and corrective actions.

Project & Operational Support oContribute to security-related projects, including tool deployments, upgrades, and architectural improvements. oProvide security guidance on infrastructure changes, firewall rules, segmentation, and system designs. oPartner with cross-functional teams to ensure secure deployment of new applications and services. oAssist with the development and improvement of security standards, procedures, and documentation.

Qualifications
Education and/or Experience
Minimum five years experience in an IT related field
Advanced knowledge of IT Security Operations and Forensic Operations
Advanced knowledge of IT Networking and Network Security Operations
Advanced knowledge of IT Infrastructure and Applications
Advanced knowledge of Cyber Attackers and Threat Actor tactics
Advanced experience of project management and delegation
Advanced business communication and collaboration skills
Advanced Documentation skills
Ability to work with teammates on projects
Ability to work alone and accomplish tasks independently
Ability to interpret research into solutions to actual problems
Customer Service skills
Advanced Documentation skills
Experienced mentoring and training skills
Ability to apply common sense understanding to carry out instructions furnished in written oral form or via DRH applications
Proficiency with MS Office and email
Ability to sit for majority of 8-hour workday; use hands and fingers to handle or feel; reach with hands and arms; talk and hear.

Specific vision abilities required by this job include close vision and peripheral vision
The noise level is generally moderate

Preferred Qualifications
Bachelor s Degree in Cyber Security discipline preferred
Provide attention to detail and manage multiple responsibilities