Aureon

Information Security Analyst II

Aureon$80K — $95K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field, or equivalent combination of education and experience.
  • 3+ years of experience in information security or related technical roles.
  • Strong understanding of security frameworks and risk management methodologies.
  • Experience with cybersecurity incident investigation and event analysis.
  • Knowledge of vulnerability management and remediation coordination.
  • Familiarity with enterprise security technologies including SIEM and endpoint protection.
  • Basic understanding of cloud security and Microsoft 365 security controls.

Responsibilities

  • Monitor and report on security events, alerts, and vulnerabilities across information systems.
  • Independently perform incident response activities from triage to post-incident reporting.
  • Conduct advanced threat hunting to identify malicious activity and security gaps.
  • Manage vulnerabilities through scanning, risk analysis, and remediation planning.
  • Develop and maintain security monitoring alerts, dashboards, and reporting systems.
  • Conduct security reviews and recommend corrective actions for systems and applications.
  • Lead vendor security assessments and third-party risk evaluations.

Benefits

  • Opportunities for professional development and training.
  • Flexible work hours to accommodate incident response needs.
  • Encouragement of continuous learning and improvement initiatives.
  • Supportive teamwork and collaboration in a dynamic environment.
  • Participation in shaping security policies and governance frameworks.
Full Job Description
KEY RESPONSIBILITIES:

  • Monitor, analyze, investigate, and report on security events, alerts, vulnerabilities, and risks across the organization's information systems.
  • Independently perform incident response activities including triage, containment, eradication, recovery, root cause analysis, and post-incident reporting.
  • Conduct advanced threat hunting activities to identify malicious activity, security gaps, and emerging threats.
  • Perform vulnerability management activities including scanning, risk analysis, remediation planning, validation, and executive reporting.
  • Develop and maintain security use cases, alerting logic, dashboards, correlation rules, and reporting within security monitoring platforms.
  • Perform security reviews of infrastructure, cloud services, applications, and business systems to identify security risks and recommend corrective actions.
  • Partner with IT teams to implement security controls, hardening standards, and remediation activities.
  • Lead vendor security assessments and third-party risk evaluations.
  • Assist with security governance initiatives including policy development, standards maintenance, risk assessments, and compliance activities.
  • Evaluate emerging threats, vulnerabilities, and industry trends and recommend improvements to strengthen the organization's security posture.
  • Participate in internal and external audits by gathering evidence, documenting controls, and validating security requirements.
  • Develop security metrics, dashboards, and reporting for leadership.
  • Lead security awareness and education initiatives throughout the organization.
  • Assist in developing and maintaining incident response plans, playbooks, security procedures, and technical standards.
  • Recommend and implement process improvements that enhance operational efficiency and reduce organizational risk.
  • Participate in after-hours incident response as required.
  • Perform other duties as assigned.


EDUCATION, TRAINING, AND EXPERIENCE:

Required

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or related field, or equivalent combination of education and experience.
  • 3+ years of experience in information security, cybersecurity operations, security engineering, security administration, or related technical roles.
  • Strong understanding of security frameworks, risk management methodologies, and cybersecurity best practices.
  • Experience investigating cybersecurity incidents and conducting security event analysis.
  • Experience with vulnerability management programs and remediation coordination.
  • Experience supporting enterprise security technologies including SIEM, endpoint protection, email security, identity security, and network security controls.
  • Working knowledge of cloud security concepts, Microsoft 365 security controls, identity and access management, and security monitoring practices.
  • Experience documenting risks, findings, recommendations, and technical procedures.


Preferred

  • One or more industry certifications such as:
    • Security+
    • GSEC
    • SSCP
    • CySA+
    • CISM
    • CISSP
    • CISA
    • GIAC certifications
  • Experience with:
    • Microsoft Sentinel
    • Microsoft Defender suite
    • Vulnerability management platforms
    • Privileged Access Management (PAM)
    • Security automation and orchestration solutions
    • Cloud security platforms
    • Threat intelligence platforms
  • Familiarity with:
    • NIST Cybersecurity Framework (CSF)
    • CIS Controls
    • ISO 27001
    • PCI-DSS
    • CPNI
    • SOC 2
  • Experience conducting security assessments and risk reviews.
  • Experience leading security projects and initiatives.


CAPABILITIES AND SKILLS:

  • Strong analytical, investigative, and critical-thinking skills.
  • Advanced ability to troubleshoot and analyze complex security issues.
  • Ability to independently prioritize and manage multiple security initiatives.
  • Strong written and verbal communication skills with both technical and non-technical audiences.
  • Excellent presentation and documentation abilities.
  • Ability to influence security decisions through education, collaboration, and risk-based recommendations.
  • Strong organizational and project management skills.
  • Ability to maintain confidentiality and handle sensitive information with discretion.
  • Demonstrated leadership and mentoring skills.
  • Commitment to continuous improvement and professional development.


WORKING CONDITIONS AND PHYSICAL REQUIREMENTS:

  • Primarily indoor work in an office environment requiring extended periods of sitting.
  • Frequent use of computer systems, security monitoring tools, and technical documentation.
  • Occasional lifting of equipment up to 50 pounds.
  • May require evening, weekend, or holiday work during security incidents or maintenance activities.
  • Occasional travel may be required.
  • Ability to respond to critical cybersecurity incidents outside normal business hours.


About Aureon

Aureon is a business services company that provides a wide range of services to businesses of all sizes. The company was founded in 1989 and is headquartered in West Des Moines, Iowa. Aureon's services include IT consulting, network services, data center services, and more. The company has a team of experienced professionals who work closely with clients to understand their needs and develop customized solutions that meet those needs. Aureon is committed to providing high-quality services and has a strong focus on customer satisfaction. The company has a proven track record of success and has helped many businesses achieve their goals.
Learn more about Aureon
Size
500 employees
Industry

Similar Jobs

More Jobs at Aureon

  • Aureon
    Information Security Analyst II
    $80K — $95K *
    West Des Moines, IA 50265 (Polk County)
    Information Technology
    In-Person
  • Aureon
    Sales Engineer
    $70K — $95K *
    West Des Moines, IA 50265 (Polk County)
    Telecommunications & Hardware
    In-Person

More Information Technology Jobs

Find similar Information Security Analyst II jobs: