Security Analyst

The Security Analyst supports the firm’s security operations by monitoring and reviewing security activity, tracking vulnerabilities, managing phishing simulations and security awareness initiatives, assisting with incident response, and developing security policies and procedures. This role works closely with the Information Security team to implement security controls and promote secure practices across the firm. The position requires sound judgment, responsiveness, strict confidentiality, and the ability to work effectively in a fast-paced environment with time-sensitive matters.

Essential Job Duties:

Assess information security risks related to the firm’s data, systems, and technology operations.

Review technology configurations and recommend secure settings and practices.

Respond to security incidents and support incident investigation, containment, remediation, and documentation.

Monitor and review security logs and user activity for indicators of suspicious or unauthorized activity.

Perform malware investigations and support employee-related security investigations as needed.

Respond to escalated security tickets and coordinate with other IT teams when additional support is required.

Assist with the review of outside counsel guidelines and client security requirements.

Evaluate security technologies and other technology solutions for risk, effectiveness, and alignment with firm requirements.

Administer security awareness training, communicate results, and follow up on required training activities.

Manage phishing simulation and new-hire security awareness programs.

Assist with vulnerability identification, tracking, prioritization, and remediation follow-up.

Help develop, maintain, and communicate information security policies and procedures.

Bachelor’s degree in Computer Information Systems, Cybersecurity, Information Technology, or a related field preferred.

Information security certifications such as GSEC, Security+, CISSP, or similar credentials preferred.

Working knowledge of current information security threats, vulnerabilities, and business risks.

Experience with cloud security monitoring in Microsoft Azure.

Experience with Microsoft E5 security tools, including the Microsoft Defender suite, and/or CrowdStrike.

Ability to work independently, prioritize responsibilities, exercise sound judgment, and respond promptly to potential security threats.

Excellent verbal and written communication skills with the ability to work effectively with a diverse group of professionals.

Strong team orientation and the ability to collaborate across technical and business teams.

Ability to educate end users on security requirements, risks, and best practices.

Ability to maintain strict confidentiality and handle sensitive information appropriately.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at, UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.