Major League Baseball (MLB)

Security Analyst

• The Special Projects Information Security Analyst will serve as a key individual contributor supporting MLB’s Email Security and Cloud Security team, focusing on operational execution, technical analysis, and project coordination across two domains: email security engineering and cloud security analysis.
• The analyst will work hands-on with security tools, processes, and data, helping to protect MLB’s communications, cloud environments, and infrastructure from evolving threats. This position offers the opportunity to learn from subject matter experts while contributing to the successful delivery of high-impact security initiatives.
• Cloud Security Analysis: Deploy, configure, and monitor cloud security controls across public and private clouds (e.g., logging & monitoring, WAF, API security gateways, anti-bot/fraud technologies).
• Support vulnerability scanning, compliance checks, and incident investigation in cloud environments using industry leading tools.
• Help integrate and validate security tooling within CI/CD pipelines.
• Conduct basic log and traffic analysis to identify anomalous or suspicious activity.
• Email Security Support: Configure, monitor, and maintain MLB’s email security platforms (e.g., Microsoft Defender for Office 365, Exchange Online Protection, multiple integrated and secure email gateways).
• Support phishing detection, triage, remediation efforts.
• Help manage authentication protocols (SPF, DKIM, DMARC, BIMI, VMC) across the league.
• Participat e in tuning email security policies, blocklists, and advanced rules to reduce false positives and improve detection.
• Operational Execution: Maintain accurate Jira/Asana ticketing, change documentation, and configuration records for security systems.
• Support proof-of-concept testing for new security tools, documenting results for engineering review.
• Use scripting languages (Python, Go, PowerShell, Bash) to automate security processes and streamline reporting.
• Interact with REST, GraphQL APIs and MCP Servers for security tool integration and data collection.
• Research & Documentation: Stay current on email-based and cloud-based threat trends, summarizing findings for engineering teams.
• Create and update SOPs, runbooks, and security awareness materials.
• Assist with audit and compliance documentation, ensuring alignment with MLB policies and industry standards.

Information Security Analyst, Special Projects, Seasonal