> Markdown version of [/jobs/ext/1427996-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/1427996-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst - **Company:** Alternative Behavior Strategies, Inc. - **Location:** Sugar Land, TX, United States (Remote available) - **Experience:** Experienced - **Salary:** $85,000.0 - $115,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Application Programming Interfaces (APIs), Android Software Development, Apple IOS, Apple Mac Systems, Audit Trail, Health Informatics, Cloud Computing, Cloud Computing Security, Cyber Security, Data Governance, Information Leak Prevention, Identity and Access Management, Python (Programming Language), Microsoft Security Essentials, Microsoft Office, OAuth, Windows PowerShell, Azure Active Directory, Cloud Services, Phishing, Kusto Query Language, Software Vulnerability Management, EndPointSecurity, Enterprise Software Applications, Office365, Malware, Cyber Threat Analysis, Microsoft InTune, Microsoft Fabric, Information Technology, Microsoft Sentinel, CIS Benchmarks, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=03be221b5e1c6b2c ## About the Role * Have a Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field or equivalent experience * 3+ years of experience in information security, cloud security, security operations, or systems administration with security responsibilities * Experience with Microsoft Sentinel, KQL, Microsoft Purview or Microsoft Security Exposure Management * Experience with PowerShell, Python, or Microsoft Graph API for security automation or reporting * Experience supporting HIPAA security controls, compliance audits or healthcare IT environments ## Description * Monitor and investigate security alerts across Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Microsoft Sentinel. * Respond to phishing, account compromise, malware, unauthorized access, and endpoint threats - coordinating containment, remediation, root-cause analysis, and post-incident documentation with IT and Compliance teams. * Coordinate with the ABS Kids managed SOC provider for alert triage, escalation, and incident response. Maintain and improve incident response playbooks and escalation procedures. Identity & Access Management * Administer and monitor MFA, Conditional Access, Privileged Identity Management, role-based access, and least-privilege controls within Microsoft Entra ID. * Review risky users, risky sign-ins, privileged roles, guest access, enterprise applications, and OAuth app permissions to identify and remediate identity-related risks. * Endpoint Security & Device Management * Develop and maintain Intune compliance policies, configuration profiles, security baselines, and application protection controls across Windows, macOS, iOS, and Android. * Monitor endpoint compliance, support Defender for Endpoint investigations, and drive remediation of noncompliant or high-risk devices in partnership with IT teams. Vulnerability Management & Threat Intelligence * Conduct vulnerability assessments across Microsoft 365, endpoints, and cloud services. Track findings and work with system owners to remediate vulnerabilities, misconfigurations, and control gaps. * Assist with threat hunting, detection tuning, and monitoring improvements. Research emerging threats and assess potential impact to the ABS Kids environment. Data Protection & Compliance * Support Microsoft Purview initiatives including Data Loss Prevention, sensitivity labels, retention policies, audit logging, and data governance controls. * Assist with HIPAA security controls, compliance audits, risk assessments, vendor security reviews, and business continuity planning. Manage compliance incident documentation in Healthicity. * Maintain the IT Security Register, risk documentation, incident records, and remediation tracking. Security Awareness & Communication * Develop security awareness communications and training on phishing, password security, and safe use of Microsoft 365 tools. Coordinate phishing simulations with IT teams. * Communicate security findings and recommendations clearly to technical and non-technical stakeholders, and promote a culture of security accountability across ABS Kids. ## Related Videos - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/videos/1015-the-ai-security-survival-guide-practical-advice-for-stressed-out-developers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)