IT Security Analyst

Role overview Support cybersecurity operations across a multi-site, hybrid IT environment that includes on-premises systems, cloud services, and SaaS applications. The role covers monitoring, incident response, vulnerability remediation, security controls, and compliance, working with technical teams and external providers to reduce risk.

Responsibilities - Monitor networks, systems, cloud platforms, and SaaS services for suspicious activity; investigate alerts from SIEM, endpoint, firewall, and identity tools. - Onboard systems into the SIEM, validate log collection, document incidents, and coordinate containment and remediation, escalating higher-risk events as needed. - Run vulnerability scans, assess and prioritize findings, report risks, and track remediation through completion with infrastructure teams. - Maintain security controls and policies for access, endpoint protection, encryption, MFA, and remote connectivity; review permissions and privileged accounts. - Support audits and control assessments by collecting evidence, maintaining security documentation, and reporting on incidents, vulnerabilities, and remediation. - Coordinate security work with service providers and support security awareness efforts.

Requirements - A degree in computer science, IT, cybersecurity, or a related area, or an equivalent combination of education, training, certifications, and experience. - At least four years in IT security, cybersecurity operations, security operations, or a closely related technical role. - Practical experience investigating security events with SIEM, endpoint detection and response, vulnerability scanning, firewall, and ticketing tools. - Experience with identity, access, and endpoint security, such as Microsoft 365, Entra ID, single sign-on, MFA, endpoint management, or zero-trust initiatives. - Experience in vulnerability management, incident response, or security control administration.

Nice to have - Familiarity with NIST 800-171, CMMC, ISO 27001, or similar frameworks; cybersecurity certification; or experience in a regulated, government, engineering, manufacturing, or energy environment.

Benefits and work setup - Hybrid, multi-site IT environment. Some weekend or extended-hours work may be needed for critical timelines. - The listing describes medical, dental, and vision coverage, paid vacation, retirement savings, and pre-tax spending benefits. - The role involves access to information subject to U.S. Department of Energy export-control requirements; authorization to access that information is required.