American Residential Services

Security Analyst

• Run external/internal vulnerability and application/software scans; analyze, deduplicate, and publish prioritized remediation backlogs.
• Correlate findings with threat intelligence, KEV/exploit data, and asset criticality; track SLAs and risk reduction.
• Coordinate fixes with Infra/Identity/App teams; validate remediation, capture evidence, and report on closure.
• Support formal penetration tests and external posture monitoring (e.g., BitSight); manage findings through closure.
• Design, build, and operate AI-driven workflows (Claude and/or ChatGPT) that automate recurring work across security operations, identity, GRC, and reporting — prioritized by the Sr. Director.
• Translate leadership priorities into production automations: report generation, evidence collection, alert summarization, audit prep, vuln triage drafting, ticket workflow assistance.
• Maintain human-in-the-loop governance and audit trails for all AI outputs; document prompts, approvals, and edge cases.
• Continuously benchmark AI tooling effectiveness; report time saved, accuracy, and adoption across the department.
• Participate in an on-call rotation.

Threat Vulnerability AI Analyst

• Monitor secure baselines (CIS) and configuration compliance for servers/endpoints/mobile; identify drift and open remediation actions.
• Partner with Network/Infrastructure teams to plan and track segmentation and Azure security improvements; validate implementation and evidence.
• Validate endpoint protection/EDR coverage and logging quality into SIEM/XDR; troubleshoot telemetry gaps with platform owners.
• Maintain standards, procedures, and audit evidence; support control testing and incident investigations.
• Analyze and recommend network security controls including firewall rule sets, Zscaler policies, and segmentation implementation across branch and datacenter environments.
• Support Azure cloud security posture management (CSPM); validate CIS benchmarks for Azure resources and monitor cloud workload protection controls.
• Participate in an on-call rotation.

Infrastructure Security Analyst

Security Engineer

• Administer Okta and Entra ID/AD; implement SSO/MFA/Conditional Access and Harden admin tiers
• Design secure API authentication and lifecycle automation (onboarding/offboarding, SCIM/JIT)
• Operate PIM/PAM for privileged identities—role design, approvals, JIT access, and session monitoring
• Integrate identity telemetry into SIEM/XDR; support access reviews and identity audits
• Participate in on-call rotation

Threat Vulnerability AI Analyst

Infrastructure Security Analyst

Identity Security Engineer