Associate Security Analyst

Job Title: Associate Security Analyst

FLSA Status: Exempt

Department: Security

Summary

The Associate Security Analyst is responsible for monitoring, analyzing, and responding to cybersecurity threats across the organization’s systems, networks, and applications. This role will assist with group compliance requirements and other regulatory tasks. This role helps protect company data and infrastructure by identifying vulnerabilities, investigating security incidents, and implementing security controls and best practices. You will work closely with the Application Support and Global Cloud Services Teams to maintain a strong security posture and ensure adherence to relevant security frameworks and regulatory requirements.

Key Responsibilities

Security Monitoring and Incident Response

• Monitor security alerts and events using SIEM, EDR, and other security tools.
• Investigate suspicious activities and potential security incidents.
• Perform incident triage, containment, eradication, and recovery activities.
• Document and report security incidents according to established procedures.

Compliance & Risk Management

• Support audits and compliance activities related to security frameworks (e.g. ISO 27001, SOC 2, NIST, GDPR).
• Assist in risk assessments and security control evaluations.
• Maintain documentation of policies, procedures, and security standards.

Threat Detection and Analysis

• Analyze logs, network traffic, and system activity for indicators of compromise.
• Conduct threat intelligence analysis to identify emerging threats.
• Develop and refine detection rules and alerting mechanisms.

Vulnerability Management

• Perform vulnerability scanning and coordinate remediation activities.
• Assess security risks and prioritize vulnerabilities based on severity and business impact.
• Work with IT teams to implement patches and security fixes.

Security Operations

• Maintain and administer security tools such as SIEM, EDR, IDS/IPS, email security, and endpoint protection.
• Assist in security architecture reviews and system hardening.
• Support identity and access management reviews.

Security Awareness

• Assist with employee security awareness training and phishing simulations.
• Promote security best practices across the organization.

Required Qualifications &

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field (or equivalent experience).
• 1–3 years of experience in cybersecurity, IT security, or security operations.
• Familiarity with network protocols, operating systems, and security architectures.
• Knowledge of common cyber threats, attack techniques, and mitigation strategies.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• Experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar).
• Industry certifications such as:
• Security+
• CISSP
• GIAC (GSEC, GCIA, or similar)
• CEH
• Experience with cloud security (AWS, Azure, or Google Cloud).
• Experience with vulnerability management tools (e.g., Nessus, Qualys).
• Familiarity with threat intelligence platforms and incident response frameworks.