IT Security Analyst

Epitec, Inc.
Framingham, MA, United States
8 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Temporary to permanent
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
2 years minimum
Compensation
$83,200.0 - $93,600.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Excel Cyber Security Power BI Phishing SQL Databases Tools for Reporting

Job description

  • Research and monitor the social engineering threat landscape to inform risk-based simulation priorities, campaign themes, and timely response recommendations.
  • Plan, coordinate, execute, and evaluate social engineering simulations and testing, including phishing, vishing, and other relevant scenarios where appropriate.
  • Analyze campaign performance, user trends, reporting behaviors, and root causes to identify patterns and opportunities for focused and role-based training.
  • Translate simulation results and security signals into practical training recommendations, reinforcement needs, and behavior-focused improvement opportunities.
  • Support in-the-moment and event-driven reinforcement for unplanned or time-sensitive communications, helping reinforce secure behaviors.
  • Develop clear metrics, dashboards, and leadership-ready summaries that connect human insights to business outcomes and measurable behavior change.
  • Identify opportunities to streamline, automate, and improve reporting processes, including centralized metrics and KPIs for Cyber Engagement.
  • Collaborate with Awareness and Training, Cyber Resiliency, business partners, and other stakeholders to align messaging and learning needs.
  • Support external vendor relationship management for simulation and response capabilities, including coordination and continuous improvement opportunities.

How this role creates value

  • Moves social engineering work beyond campaign execution by connecting results to root cause, remediation, and measurable behavior change.
  • Strengthens collaboration across Cyber Engagement by creating a consistent feedback loop between simulations, awareness content, and role-based training.
  • Improve sustainability through repeatable reporting and metrics that can scale across global users and business functions.

Requirements

As an IT Security Analyst - Junior on the Cyber Engagement team, you will help understand, measure, and delver social engineering simulations, prompt reinforcement, campaign analysis, and actionable recommendations that support a more secure-minded workforce. We are looking for a motivated, collaborative, detail-oriented IT Security Analyst - Junior who is curious about human behavior, persistent in improving outcomes, and comfortable turning data into practical action., * 2-5 years of experience in cybersecurity awareness, social engineering simulation or related security discipline.

  • Experience designing, supporting, or measuring social engineering simulations, user awareness campaigns, behavior change initiatives, and remediation efforts.
  • Ability to transform security and user behavior data into meaningful metrics, executive-level reporting, and risk-informed recommendations.
  • Experience developing dashboards and reporting using Power BI or similar analytics tools.
  • Demonstrated ability to analyze complex data in Excel, identify trends and patterns, develop meaningful insights, and present findings in a clear, actionable manner
  • Ability to write and execute SQL queries
  • Strong analytical, communication, and stakeholder management skills, with the ability to work independently, manage competing priorities, and partner effectively across technical and business teams.

Preferred Qualifications

  • Experience using security awareness and training tools (examples: KnowBe4 and Proofpoint)

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

1:14 min

Evolution of distributed SQL database architectures

Wei Hu Wei Hu · World Congress 2024

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

1:24 min

Moving the semantic layer upstream to avoid vendor lock-in

Piotr Menclewicz Piotr Menclewicz · Europe 2026 Virtual

14:14 min

Addressing audience inquiries on analytical implementation and career growth

Julian Joseph · LIVE

1:36 min

Evolution from key-value stores to distributed SQL

Wei Hu Wei Hu · World Congress 2025

Videos

See all

Related articles

See all