Information Security Analyst 3 - SOC Analyst

Job#: 3043803

Job Description:
Information Security Analyst 3 - SOC Analyst
Location

• Charllotte, NC / Dallas, TX / Minneapolis, MN / Chandler, AZ / Des Moines. IA, Raleigh, NC

Job Summary

The Information Security Analyst 3 is responsible for supporting enterprise information security initiatives through risk analysis, security monitoring, incident response, compliance activities, security assessments, Identity and Access Management (IAM), and stakeholder consultation. This role serves as a key contributor in identifying, assessing, and mitigating cybersecurity risks while ensuring alignment with Enterprise Information Security policies, standards, and regulatory requirements.

The ideal candidate will possess a strong background in security operations, incident response, threat detection, security analytics, cloud security technologies, and identity security. This individual will partner with technology teams, security operations personnel, risk management partners, and business stakeholders to improve the organization's security posture, proactively address cyber threats, and support enterprise security governance initiatives.
Key Responsibilities
Information Security Risk Management

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policies, standards, and procedures.
• Perform remediation activities related to security assessments, audits, risk reviews, and control testing findings.
• Provide guidance and recommendations regarding mitigating controls and information security risk reduction strategies.
• Evaluate information security risk exposure through advanced data aggregation, analysis, and reporting.
• Review and interpret security policies, standards, and procedures while recommending improvements and enhancements.
• Support information asset portfolio reconciliation and certification activities.
• Review proposed control standards for business impact and provide recommendations for modifications and clarifications.
• Support enterprise risk, compliance, governance, audit, and security control programs.

Security Operations & Incident Response

• Participate in security monitoring, investigation, containment, escalation, and remediation activities.
• Support incident response processes utilizing established procedures, tools, and technologies.
• Perform threat hunting and investigative activities utilizing endpoint, network, identity, and cloud security telemetry.
• Analyze security events and alerts generated by security monitoring platforms.
• Support cyber threat detection and response efforts through security analytics and log analysis.
• Leverage offensive security concepts and adversarial thinking techniques to identify indicators of compromise, threat actor behaviors, and emerging threats.
• Conduct vulnerability assessment reviews and support remediation planning activities.

Security Monitoring & Analytics

• Utilize Security Information and Event Management (SIEM) platforms to identify, investigate, and respond to security events.
• Leverage Security Orchestration, Automation, and Response (SOAR) tools to improve security operations efficiency.
• Analyze host, endpoint, network, cloud, and identity-related logs to identify suspicious activity and potential security incidents.
• Develop reporting, dashboards, and metrics related to security risks, incidents, and operational performance.
• Conduct threat hunting activities utilizing security analytics, endpoint telemetry, and event data.
• Support cybersecurity reporting, security metrics development, operational dashboards, and risk exposure analysis.

Identity & Access Management (IAM)

• Support enterprise Identity and Access Management (IAM) programs and security controls.
• Assist with Identity Governance processes, access reviews, certification activities, and entitlement validation.
• Support provisioning and deprovisioning controls and related compliance initiatives.
• Review and analyze identity security risks associated with access management processes.
• Support Privileged Access Management (PAM) initiatives and enterprise access control programs.
• Assist with implementation and validation of identity-related controls including authentication, authorization, and Attribute-Based Access Control (ABAC) frameworks.

Security Controls & Compliance

• Conduct security control testing and validation activities.
• Assess effectiveness of security controls and identify opportunities for improvement.
• Support compliance initiatives and regulatory requirements within the enterprise environment.
• Partner with risk, compliance, audit, and technology teams to ensure effective governance and control coverage.
• Assist with development and delivery of Information Security Awareness and Education programs.
• Support vulnerability management processes, remediation efforts, and enterprise security governance initiatives.
• Participate in security assessments and control reviews to improve overall risk posture.

Cloud & Endpoint Security

• Support security monitoring and investigative efforts across:
  • Microsoft Azure
  • Office 365
  • Google Cloud Platform (Google Cloud Platform)
  • Cloud-based environments
• Monitor and analyze security events generated from Endpoint Detection and Response (EDR) platforms.
• Support implementation and maintenance of security controls protecting cloud and endpoint technologies.
• Evaluate cloud security risks and recommend appropriate mitigation strategies.
• Assist with monitoring cloud security posture and compliance requirements across multi-cloud environments.

Security Engineering & Automation

• Support security tool integrations and automation initiatives that improve detection and response capabilities.
• Partner with security engineering teams to enhance monitoring, workflow automation, and operational effectiveness.
• Support SOAR implementation efforts and security automation activities.
• Contribute to DevSecOps and security operations modernization initiatives.
• Assist with security analytics and advanced detection engineering efforts.

Collaboration & Leadership

• Collaborate with peers, technology teams, security engineers, compliance partners, and business stakeholders.
• Provide consultation and security guidance to internal customers.
• Support cross-functional security initiatives and projects.
• Mentor junior analysts and provide knowledge sharing across the team.
• Participate in continuous improvement efforts to strengthen security operations and risk management programs.
• Serve as a trusted advisor on information security risks, controls, and incident response activities.

Required Qualifications

• 4+ years of Information Security Analysis experience or equivalent demonstrated through work experience, military experience, education, or training.
• 2+ years of Information Security Engineering experience.
• 1+ year of Incident Response experience utilizing security monitoring tools and response methodologies.
• 1+ year of experience with:
  • Security Information and Event Management (SIEM) platforms
  • Security Orchestration, Automation, and Response (SOAR) solutions
• 1+ year of experience supporting:
  • Microsoft Azure
  • Office 365
  • Cloud security technologies
• Experience conducting security investigations and responding to security incidents.
• Knowledge of security analytics, incident response, and digital forensics disciplines.
• Experience developing security reports, dashboards, and risk analysis deliverables.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.

Preferred Qualifications

• 2+ years of experience supporting Endpoint Detection and Response (EDR) solutions.
• Experience with:
  • Threat Hunting
  • Security Operations
  • Incident Response
  • Digital Forensics
  • Security Analytics
• Experience supporting Identity and Access Management (IAM), Identity Governance, Access Reviews, Provisioning and Deprovisioning, Privileged Access Management (PAM), and enterprise access control programs.
• Experience developing cybersecurity metrics, dashboards, reporting, and operational security analytics.
• Knowledge of offensive security concepts including penetration testing methodologies, adversary tactics, exploitation techniques, and vulnerability research.
• Experience performing host and network log analysis in support of threat investigations and incident response activities.
• Experience supporting vulnerability management, remediation planning, security assessments, and enterprise security governance initiatives.
• Experience securing and monitoring cloud environments including Microsoft Azure and Google Cloud Platform (Google Cloud Platform).
• Experience supporting security automation, security tool integrations, SOAR initiatives, and DevSecOps-driven security operations.
• Experience working in banking, financial services, or other highly regulated environments.
• Experience working within a 24x7x365 Security Operations Center (SOC) environment.

Technical Skills
Security Operations

• Incident Response
• Threat Hunting
• Security Monitoring
• Digital Forensics
• Security Investigations
• Security Analytics
• Threat Detection
• Cyber Threat Analysis

Security Platforms

• SIEM
• SOAR
• Endpoint Detection & Response (EDR)
• Log Management Solutions
• Security Monitoring Platforms
• Security Automation Tools

Cloud Security

• Microsoft Azure
• Office 365
• Google Cloud Platform (Google Cloud Platform)
• AWS
• Cloud Security Monitoring
• Cloud Security Controls
• Cloud Risk Management

Identity & Access Management

• Identity Governance
• Access Reviews
• Privileged Access Management (PAM)
• Authentication & Authorization
• IAM Administration
• Provisioning & Deprovisioning
• Attribute-Based Access Control (ABAC)

Security Controls & Governance

• Security Assessments
• Security Risk Management
• Security Control Testing
• Information Security Governance
• Regulatory Compliance
• Audit Management
• Vulnerability Management
• Remediation Planning

Security Technologies

• Firewalls
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Malware Protection
• Encryption Controls
• Content Filtering
• Internet Proxies
• Endpoint Security Controls

Preferred Certifications

One or more of the following certifications are highly desired:

• GIAC (Global Information Assurance Certification)
• OSCP (Offensive Security Certified Professional)
• OSWP (Offensive Security Wireless Professional)
• OSCE (Offensive Security Certified Expert)
• OSEE (Offensive Security Exploitation Expert)
• OSWE (Offensive Security Web Expert)

Cloud Certifications

• AWS Certified Security Specialty
• Microsoft Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Other relevant cloud security certifications

Desired Candidate Profile

The ideal candidate is a cybersecurity professional with expertise in incident response, threat detection, security monitoring, cloud security, security analytics, and Identity and Access Management (IAM). This individual possesses strong analytical and investigative skills, experience leveraging SIEM, SOAR, and EDR technologies, and the ability to identify and respond to complex cybersecurity threats.

Successful candidates will have experience supporting enterprise security operations, conducting threat hunting activities, performing vulnerability assessments, developing security metrics and reporting, and collaborating with risk, compliance, audit, and technology teams. Experience within large-scale, highly regulated environments such as financial services organizations is highly preferred.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at or . Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.