> Markdown version of [/jobs/ext/2295078-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/2295078-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Analyst

- **Company:** Epitec, Inc.
- **Location:** Framingham, MA, United States (Remote available)
- **Experience:** Starter
- **Salary:** $83,200.0 - $93,600.0
- **Contract:** Temporary to permanent
- **Skills:** Microsoft Excel, Cyber Security, Power BI, Phishing, SQL Databases, Tools for Reporting
- **Published:** August 29, 2026
- **Apply:** https://www.dice.com/job-detail/4fa96079-bbf2-4b22-b21e-1d340b4e7731

## About the Role

As an IT Security Analyst - Junior on the Cyber Engagement team, you will help understand, measure, and delver social engineering simulations, prompt reinforcement, campaign analysis, and actionable recommendations that support a more secure-minded workforce. We are looking for a motivated, collaborative, detail-oriented IT Security Analyst - Junior who is curious about human behavior, persistent in improving outcomes, and comfortable turning data into practical action., * 2-5 years of experience in cybersecurity awareness, social engineering simulation or related security discipline.

 * Experience designing, supporting, or measuring social engineering simulations, user awareness campaigns, behavior change initiatives, and remediation efforts.
 * Ability to transform security and user behavior data into meaningful metrics, executive-level reporting, and risk-informed recommendations.
 * Experience developing dashboards and reporting using Power BI or similar analytics tools.
 * Demonstrated ability to analyze complex data in Excel, identify trends and patterns, develop meaningful insights, and present findings in a clear, actionable manner
 * Ability to write and execute SQL queries
 * Strong analytical, communication, and stakeholder management skills, with the ability to work independently, manage competing priorities, and partner effectively across technical and business teams.

Preferred Qualifications

 * Experience using security awareness and training tools (examples: KnowBe4 and Proofpoint)

## Description

* Research and monitor the social engineering threat landscape to inform risk-based simulation priorities, campaign themes, and timely response recommendations.
 * Plan, coordinate, execute, and evaluate social engineering simulations and testing, including phishing, vishing, and other relevant scenarios where appropriate.
 * Analyze campaign performance, user trends, reporting behaviors, and root causes to identify patterns and opportunities for focused and role-based training.
 * Translate simulation results and security signals into practical training recommendations, reinforcement needs, and behavior-focused improvement opportunities.
 * Support in-the-moment and event-driven reinforcement for unplanned or time-sensitive communications, helping reinforce secure behaviors.
 * Develop clear metrics, dashboards, and leadership-ready summaries that connect human insights to business outcomes and measurable behavior change.
 * Identify opportunities to streamline, automate, and improve reporting processes, including centralized metrics and KPIs for Cyber Engagement.
 * Collaborate with Awareness and Training, Cyber Resiliency, business partners, and other stakeholders to align messaging and learning needs.
 * Support external vendor relationship management for simulation and response capabilities, including coordination and continuous improvement opportunities.

How this role creates value

 * Moves social engineering work beyond campaign execution by connecting results to root cause, remediation, and measurable behavior change.
 * Strengthens collaboration across Cyber Engagement by creating a consistent feedback loop between simulations, awareness content, and role-based training.
 * Improve sustainability through repeatable reporting and metrics that can scale across global users and business functions.


## Related Videos

- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)