IT Security Analyst

Key Responsibilities & Evaluation Focus: • Review and analyze security alerts from SentinelOne, SIEM/SEM, and Netwrix • Review network traffic, access logs, and failures (FortiGate, Cisco Umbrella) • Triage and escalate security incidents appropriately • Identify recurring patterns and potential control gaps • Document investigations, findings, and remediation actions 30% - Security Monitoring, Traffic Review & Incident Triage Objective: Monitor, analyze, and respond to security events and anomalous activity to reduce risk and support timely incident resolution. 25% - Vulnerability Management, Patching & Exposure Reduction Objective: Identify, prioritize, and track vulnerabilities and patching outcomes to reduce organizational exposure. Key Responsibilities & Evaluation Focus: • Coordinate and review internal/external vulnerability scans (Nessus, Pentera, UpGuard, Cloudflare) • Validate findings and reduce false positives • Track vulnerability remediation and aging • Support patch testing, deployment tracking, and compliance reporting • Demonstrate risk-based prioritization of remediation efforts 20% - Endpoint Hardening, Baselines & Compliance Objective: Maintain secure endpoint configurations through standardized baselines and compliance-driven controls. Key Responsibilities & Evaluation Focus: • Create and maintain secure endpoint baselines and golden images • Reduce configuration drift and validate baseline compliance • Maintain endpoint security agent health and coverage • Produce audit-ready evidence aligned to CMMC requirements • Document approved exceptions and compensating controls 10% - Identity, Access & Risk Support Objective: Support secure access practices and organizational risk management activities. Key Responsibilities & Evaluation Focus: • Execute onboarding/offboarding and validate access • Participate in periodic access reviews and remediation • Support MFA and access control initiatives • Participate in risk assessments and document findings • Support software approval and intake processes 15% - Vendor Security, Metrics & Operational Support Objective: Support third-party risk management, security visibility, and small-team operational needs. Key Responsibilities & Evaluation Focus: • Support vendor security questionnaires and artifact tracking • Track remediation items and follow-ups • Track and report security KPIs and metrics • Maintain runbooks, SOPs, and documentation • Provide helpdesk/desktop failback support when required