ON-SITE INFORMATION SECURITY ANALYST

• Schedule: Monday through Friday, 8:00 a.m. to 5:00 p.m., with occasional after-hours work required.
• Monitor and investigate alerts from SIEM and other security tools.
• Respond to incidents involving phishing, malware, unauthorized access, and other threats. Support containment, recovery, and post-incident reviews.
• Conduct vulnerability scans, assess findings, and track remediation through completion.
• Help maintain security policies, standards, procedures, and incident documentation.
• Support security audits and assessments against applicable requirements and frameworks, such as NIST, ISO 27001, HIPAA, and PCI DSS.
• Assist with the implementation and tuning of endpoint protection, IDS/IPS, DLP, MFA, and other security controls.
• Review system and network configurations and recommend improvements.
• Contribute to security awareness training and phishing simulations.
• Advise IT and business teams on practical security measures.

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent work experience.
• Two to five years of experience in information security, cybersecurity, or IT operations.
• Understanding of network and system security, common cyber threats, incident response, and vulnerability management.
• Strong analytical, problem-solving, documentation, and communication skills.

Preferred Qualifications

• Security+, CEH, CISSP, GIAC, or a similar certification.
• Experience with SIEM, endpoint detection and response (EDR), and vulnerability management tools.
• Familiarity with security practices in Azure, AWS, or Google Cloud.
• Experience in a regulated or compliance-focused environment., The successful candidate is detail-oriented, exercises sound judgment, communicates clearly, and works well both independently and with others.