Job SummaryThe Information Security Analyst I leverages experience in information systems and security to analyze log data and proactively investigate suspicious behavior on corporate systems and networks. The Information Security Analyst I will assist senior members of the team in tuning and improving prevention, detection, and response techniques by providing recommendations based on the evolving threat landscape. In addition, the Information Security Analyst I will be required to respond to security alerts generated by various systems and applications.
Physical RequirementsStand or Sit(Stationary position), Walk(Move, Traverse), Use hand/fingers to handle or feel (Operate, Activate, Use, Prepare, Inspect, Place, Detect, Position), Talk/hear(Communicate, Detect, Converse with, Discern, Convey, Express oneself, Exchange information), See (Detect, Determine, Perceive, Identify, Recognize, Judge, Observe, Inspect, Estimate, Assess), Reaching, Repetitive Motion
Function in the JobSedentary Work- Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
Job FunctionSecurity Governance - Understand and assist with self-audits, policies and procedures to provide assurance that information security strategies are aligned with applicable laws and regulations through adherence to internal controls.
- Understand the security landscape and contribute to the development and review of security policies and procedures to address new regulations, threats or best practices
- Stay abreast of Audit requirements and assist with the management of self-audits and Internal/External audits.
- Contribute to the development of end user security training and awareness program
Threat Management - Ability to understand security threats and their risk to the organization.
- Assist with periodic security assessments, vulnerability and pen tests
- Assist with the tracking of any remediation required due to security assessments / tests
- Review security tool logs to look for any potential security issues or breaches
Security Roadmap - Understand and contribute to the development of the Security Program Roadmap.
Security Engineering - Collaborate with Engineering on the implementation of security technologies.
- Assist with identifying potential security technologies and researching their capabilities.
SUPPLEMENTAL DUTIES & RESPONSIBILITIES
- Pursues training and development opportunities; strives to continuously build knowledge and skills
- Assist personnel in other RTS departments to resolve technical and/or application issues
- Participates and assists with internal and external audits
- Other duties as requested
Required Skills- Bachelor's degree or equivalent experience (internships/co-ops count).
- 0-2 years in information security or 2-4 years in a related IT role.
- Must be self-motivated and able to work independently, with minimal supervision and as part of a team
- Exposure to vulnerability scanning and remediation tracking; understands basic risk prioritization.
- Exposure to endpoint detection/response and basic alert triage.
- Exposure to SIEM, EDR, vulnerability management, or ticketing platforms. Familiarity with incident monitoring and log analysis; performs first-level triage and escalation using runbooks (rule/detection creation is a plus).
- Experience with Python, PowerShell, JavaScript, or other scripting languages. Ability to use a scripting language to parse logs, query data, or automate tasks (simple report generation).
- Competency with AI-assisted productivity or automation tools.
- Working knowledge of authentication, access control, MFA, certificates, and encryption basics. General understanding to technical infrastructure (Active Directory, Applications, various Operating Systems, etc.)
- Awareness of common security frameworks and control concepts (e.g., NIST, CIS Controls) and how they map to day to day tasks.
- Metrics mindset: tracks and improves operational measures such as time to acknowledge, mean time to triage, escalation timeliness, SLA adherence, and documentation quality.
- Detail oriented with excellent interpersonal communication skills
- Expected to partner, collaborate, and mentor effectively with other teams on an ongoing basis
- Strong analytical skills and the ability to present information in an easily consumable format.
- Strong organizational skills and ability to multi-task in an enterprise business environment. Ability to manage/track completion of projects and remediation tasks
- Outstanding technical documentation skills
- Strong written, verbal and presentation communication skills and ability to communicate at all levels within an organization
Growth Path: Demonstrates the ability to investigate and close moderate
-complexity incidents end
-to
-end (including post
-incident reports); author and tune detections/use cases and basic automation; own a security capability or process area with cross
-team coordination; lead portions of risk assessments or control testing and drive remediation; improve key operational metrics (e.g., MTTA/MTTR, detection efficacy, SLA adherence, documentation quality); and achieve at least one industry baseline certification while maintaining continuing education.
Compensation RangeThe anticipated compensation for this position is USD $80,000.00/Hr. - USD $85,000.00/Hr. depending on experience, qualifications, and location.
