IT Security Analyst

The IT Security Analyst supports the design, implementation, and evaluation of secure IT infrastructure across both on-premises and cloud environments. This role focuses on identifying security requirements, ensuring compliance with policies and industry standards, and validating that systems meet best-practice security guidelines. The position requires strong expertise in security engineering, networking, and infrastructure, along with the ability to automate processes using scripting and coding.

Key responsibilities include developing and maintaining security awareness programs, investigating incidents, identifying threat patterns, and recommending proactive security improvements. The analyst collaborates closely with IT and other departments to secure systems, troubleshoot complex issues, and design new solutions. They monitor and audit systems, conduct intrusion detection and risk assessments, and help implement mitigation strategies.

The role also involves managing cybersecurity policies, access controls, business continuity, and disaster recovery planning. Responsibilities include conducting vulnerability assessments, penetration testing, and supporting audits by preparing documentation and resolving findings. The analyst ensures adherence to frameworks such as HIPAA, PCI DSS, NIST, and CIS.

Additionally, the position requires managing user access through provisioning/deprovisioning, enforcing least-privilege principles, and performing regular access reviews. The analyst contributes to improving onboarding/offboarding processes and stays current on identity and access management best practices.

Candidates are expected to stay updated on emerging security threats and technologies, participate in professional development, and promote organizational values such as positivity, ownership, efficiency, and transparency.

• Education: Degree in Computer Science, Information Systems, or equivalent experience
• Experience: 1-5 years in cybersecurity, IT support, or related roles
• Strong knowledge of SIEM, XDR, EDR, threat hunting, and vulnerability management
• Experience with security tools, networking, Active Directory, and access controls
• Preferred certifications: CISSP, CISM, CISA, CEH, Security+, GIAC, etc.

Skills:

• Strong analytical, troubleshooting, and decision-making abilities
• Excellent written and verbal communication
• Familiarity with tools like IDS/IPS, DLP, firewalls, VPNs, MFA, and email encryption
• Ability to work with audits, incident tracking, and change control processes

3.93.9 out of 5 stars San Diego, CA Remote $110,000 - $125,000 a year