Security Analyst

Our client is seeking a Security Management Analyst for a fully remote, 12-month contract position based in the United States (EST or CT). As a Security Management Analyst, you will be responsible for tracking, validating, and reporting on security issues across Linux and Windows servers, network infrastructure, Microsoft Azure, and Google Cloud environments. You will collaborate with Information Security, Infrastructure, Cloud, Network, Endpoint, and Compliance teams to ensure security issues are accurately identified, assigned, remediated, and verified. This role requires maintaining and enforcing procedures for remediation tracking, validation, and reporting, and providing clear communication of risk, priorities, and deadlines to technical teams and leadership. You will also support compliance requirements such as PCI-DSS, maintain audit evidence, and review security-related changes through the Change Advisory Board. The ideal candidate will have at least four years of experience in IT security, vulnerability management, or infrastructure operations, strong communication skills, and relevant security certifications. Preferred qualifications include experience with Microsoft Defender Vulnerability Management, PCI-DSS or audit support, ServiceNow and Jira, scripting with KQL or PowerShell, and cloud security certifications. WHAT YOU’LL DO

• Review vulnerability findings and security issues to confirm accuracy, risk, and responsible team
• Coordinate remediation with Infrastructure, Cloud, Network, and Endpoint teams and track each issue to closure
• Validate that fixes and security updates were applied and the issue is resolved
• Report remediation status, open issues, and exceptions to IT leadership and Information Security
• Communicate risk, priorities, and deadlines clearly to technical teams and leadership
• Track exceptions and risk acceptances with owners and review dates
• Maintain audit evidence and support Compliance with PCI-DSS and other requirements
• Create and maintain procedures for remediation tracking, validation, and reporting, and confirm teams follow them
• Review security-related changes through the Change Advisory Board

• 4+ years of experience in IT security, vulnerability management, or infrastructure operations
• Working knowledge of Linux and Windows servers, networking, Microsoft Azure, and Google Cloud
• Experience reviewing vulnerability scan results and tracking remediation to closure
• Experience building clear status reports for technical teams and leadership
• Strong written and verbal communication skills
• Security certification such as CompTIA Security+, CompTIA CySA+, or equivalent
• Experience with Microsoft Defender Vulnerability Management (preferred)
• PCI-DSS or audit support experience (preferred)
• Familiarity with ServiceNow and Jira (preferred)
• Experience with KQL or PowerShell for pulling security data (preferred)
• Azure or Google Cloud security certification (preferred)

• Competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage options
• 401k plan with company match, fully vested after eligibility
• Paid time off, sick time, and paid company holidays
• Employee Assistance Program (EAP) including virtual counseling, financial services, legal services, and life coaching

• Disclaimer: Brooksource, Medasource, and Calculated Hire are part of the Eight Eleven Group family of companies and operate under Eight Eleven Group, LLC. All employees receive the same benefits, policies, and terms of employment.