Security Analyst

• Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions
• Support SOC 1 Type 2 audit readiness and remediation initiatives
• Lead Quality Management System (QMS) audits
• Support Data Loss Prevention (DLP) initiatives and assessments
• Assist with Vendor Security Management Program activities
• Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)
• Validate system configurations for compliance with security standards
• Monitor server logs, network traffic, and security alerts
• Analyze findings and recommend remediation actions
• Assess and implement security patches, upgrades, or reconfigurations
• Support Windows infrastructure environments (e.g., Active Directory, Group Policy)
• Apply cloud security best practices across enterprise systems
• Maintain awareness of privacy and security frameworks (e.g., ISO 27701)
• Mentor junior cybersecurity staff and collaborate with senior team members
• Independently manage compliance projects and initiatives
• Report project status and compliance progress to leadership

Senior Cybersecurity Analyst

Threat Intelligence Specialist

• Investigate system-generated alerts, referrals, and account activity to identify suspicious behavior
• Analyze customer and transaction data to detect irregular patterns and potential financial crimes
• Document findings clearly in case management systems, including detailed narratives and SAR filings when required
• Exercise sound judgment to escalate or refer high-risk accounts in accordance with procedures
• Partner with internal teams and serve as a resource on fraud and suspicious activity inquiries
• Ensure compliance with BSA/AML regulations and internal policies through accurate reporting
• Monitor trends and support reporting, metrics, and research to enhance detection strategies
• Continuously build expertise through training, tools, and industry best practices

Financial Intelligence Analyst

• The Threat Intelligence Analyst is a key member of the Security Operations Center (SOC) and is responsible for shadowing more experienced analysts
• They are provided experiential training to support alarm research and development as well as performing research on emerging threats and providing communication to our customers
• With support, they act as a technical expert in our detections as well as a collaborative point of escalation for our SOC team
• They analyze logs, actively pursue the most cutting-edge industry news and events, think like an attacker, and correlate information across wide data sets with the guidance of more senior analysts

Threat Intelligence Analyst

Incident Response Analyst

• Monitor and respond to cybersecurity alerts generated from SIEM provider dashboards and security monitoring platforms.
• Investigate, remediate, and document security incidents reported through automated alerts, tickets, emails, phone calls, or external SOC notifications.
• Act as the primary investigator for potential security incidents identified by SOC analysts or monitoring tools.
• Follow documented incident response playbooks while exercising sound judgment to contain and remediate threats.
• Investigate phishing emails, user‑reported security concerns, and potential attempts at fraud or financial loss.

Technical Incident Response Analyst

• Support the continuous improvement and monitoring of the Information Security Management System (ISMS) across the organization, including third-party suppliers.
• Ensure that security measures are fully integrated, operational, and compliant with applicable regulations and standards.
• Support and execute the planning, preparation, and execution of compliance audits.
• Ensure implementation of ISMS documentation and technology platform, such that all assigned security policies, procedures, and processes are accurately maintained, automated, and streamlined reducing manual intervention and improving efficiency.
• Integrate experience and insights into actionable ideas or solutions to manage information risk and advise cross-functional teams, third-party vendors, and other stakeholders.
• Maintain and validate an accurate and up-to-date information asset inventory process, ensuring the completeness and accuracy of assets.
• Perform regular asset-based and scenario-based risk assessments to identify vulnerabilities and risks associated with assets and inclusion in the risk register.
• Identify, assess, and track treatment plans for information security and privacy-related risks and nonconformities for their severity, potential impacts, and their probably of recurrence.
• Coordinate and communicate updates to process, policies, and procedures based on the treatment of risks and nonconformities.
• Assist in completion and maturation of supply chain risk management activities and administer associated technology platforms to ensure conformance with the standard and compliance with legal, regulatory, and contractual requirements. Activities include, but are not limited to, tracking third-party security scores and working with third-parties and internal functions to improve their security scores, performing contract reviews, and completing customer questionnaires while managing improvement to security processes reflected in responses.
• Support the development and monitoring of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for the ISMS.
• Collect, analyze, and summarize relevant data to be reported to leadership, helping drive strategic security initiatives and ensuring ongoing compliance with regulatory and customer requirements.
• Stay up-to-date on emerging regulations, customer requirements, and best practices, ensuring that the ISMS evolves, as necessary. Ensure stakeholders are informed on how to address changing compliance environments, including privacy regulations (e.g., GDPR, CCPA, and other relevant U.S. state laws).
• Mentor and coach lower-level information security analysts. Review their work for quality, consistency, and alignment with ISMS standards.
• Maintain regular and punctual attendance.
• Attend in-person or virtual meetings as requested or required.
• Communicate effectively and respectfully with others.
• Other responsibilities as assigned.
• Understand and comply with all applicable Company policies and rules.

Senior Information Security Analyst

• Analyze and respond to cyber threats.
• Gain expertise in several cybersecurity technologies and defensive domains.
• Maintain partnerships with stakeholders and assist with end-to-end Incident Response remediation.
• Monitoring of technical security controls and detection technologies.
• Provide cybersecurity threat recommendations to stakeholders and decision makers.
• Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack infrastructure.
• Be a responsive and helpful engagement point for technology teams during Incident Response activities.
• Assess internal and external networks to define and monitor Kemper’s attack surface.

Cybersecurity Analyst

• The Senior Information Security Analyst is responsible for monitoring, analyzing, and responding to cybersecurity threats across enterprise IT and (as applicable) ICS/OT environments
• Act as the internal escalation for the Managed Service Provider: review escalated cases, confirm scope/impact, request additional evidence as needed, and drive the investigation to resolution
• Perform quality reviews of Managed Service Provider incident tickets (timeliness, analysis depth, documentation, and recommendations) and provide feedback
• Mentor SOC analysts through coaching, investigation walk-throughs, and after-action reviews; contribute to skills development and knowledge transfer
• Provide technical guidance on investigation methodology, evidence collection, and response actions
• Partner with IT, and OT operations teams to embed security controls and logging requirements across systems and services
• Provide technical input on policy development, control design, and remediation planning based on observed threats, incidents, and detection gaps
• Review and validate operational metrics for assigned areas (e.g., alert quality, false positives, detection coverage, response timelines) and recommend improvements
• Ensure investigations and response activities align with business priorities and applicable regulatory requirements; support audits and evidence requests as needed
• Drive continuous improvement of security operations playbooks, procedures, and team readiness through lessons learned and regular reviews
• Manage assigned incident workload and Managed Service Provider escalations by ensuring security incidents and events are identified, analyzed, documented, and driven to closure within defined timelines
• Recommend security controls to protect information systems based on ongoing reviews of security incidents, vulnerabilities, and threats
• Stay up to date with the latest threats, vulnerabilities, and security trends and make recommendations for improving our security posture.

• Monitor and triage security alerts, performing basic investigations
• Follow established playbooks for initial response actions
• Document findings and escalate potential threats in a timely manner
• Assist with user and service account access reviews
• Review and process whitelist requests
• Analyze reported phishing emails and help identify trends
• Perform basic log reviews and data validation
• Maintain and update runbooks/playbooks
• Participate in incident post-mortems
• Track and report on recurring alerts for tuning opportunities
• Ensure tickets and alerts are properly categorized and closed for audit readiness
• Support audit and compliance requests

Enterprise Security Analyst I

• Lead configuration monitoring and compliance for database technologies (e.g., Oracle, SQL Server, MySQL, Sybase, MongoDB etc).
• Participate and provide input (as needed) to help define, implement, and maintain secure configuration baselines and control requirements.
• Enable and optimize scanning, monitoring, and alerting capabilities for database configurations.
• Analyze scan results, understand misconfigurations, and support remediation efforts.
• Partner with database, infrastructure, and engineering teams to embed security controls into build and operational processes (shift-left mindset).
• Support risk assessments, audits, and regulatory inquiries related to database security posture.

Cyber Security Analyst, Database Configuration Monitoring

• Seeking a Cybersecurity Analyst with strong Unix/Linux expertise to support configuration security monitoring across the enterprise environments.
• Implement and maintain configuration monitoring controls for Unix/Linux systems using scanning tools.
• Participate and provide input (as needed) to help define, implement, and maintain secure configuration baselines and control requirements.
• Enable and optimize scanning, monitoring, and alerting capabilities for Unix/Linux configurations.
• Analyze scan results, understand misconfigurations, and support remediation efforts.
• Partner with Unix/Linux infrastructure, and engineering teams to embed security controls into build and operational processes (shift-left mindset).
• Support risk assessments, audits, and regulatory inquiries related to Unix/Linux security posture.
• Ensure assigned support tickets are dispositioned timely and effectively.

Cyber Security Analyst – Unix/Linux Configuration Monitoring

• Ensure compliance of AI solutions, platforms, and model deployments with internal and external security requirements
• Guide application, platform, and product owners on AI security architecture, configuration, and governance requirements
• Assess and follow up on non-conformances related to AI models, agents, model APIs, prompt workflows, vector databases, inference endpoints, and orchestration layers
• Investigate and further assess potential AI security risks including prompt injection, data leakage, insecure tool use, model misuse, identity and access weaknesses, and supply chain risks
• Support security reviews of AI systems including foundation models, locally hosted models, retrieval-augmented generation (RAG) solutions, agentic workflows, and model-serving infrastructure
• Lead and/or aid security assessments and access reviews for AI platforms, model environments, and related cloud or on-premise services
• Identify non-conforming AI deployments, integrations, and usage patterns across business and technical environments
• Support governance of AI security tooling, controls, and monitoring processes
• Ensure feasibility of AI security requirements set for engineering and product teams
• Work in a global role with multiple stakeholders from different domains and different regions
• Provide regular program updates to the CISO, CIOs, and other stakeholders
• Establish and maintain relationships with stakeholders including CIOs, and global IT, IT security, engineering, legal, privacy, and compliance leaders
• Ensure proper alignment of AI security requirements to GE HealthCare’s IT Security Framework and enterprise AI governance standards
• Maintain exception processes for AI platforms, model usage, and supporting infrastructure
• Support communication and awareness efforts related to secure AI adoption
• Draft communications and training materials
• Write guidance documents, standards, and secure implementation patterns for AI solutions
• Review AI integration patterns involving MCP, A2A protocols, tool-calling frameworks, and agent communication mechanisms to ensure secure design and operation
• Support risk assessments for third-party AI services, open-source models, and locally hosted AI model deployments
• Partner with engineering teams to promote secure AI development lifecycle practices, including threat modeling, validation, testing, monitoring, and incident response preparedness

AI Enablement and Security Analyst

• Partner with the Authentication team leader and technology SMEs to drive adoption of compliant, enterprise‑wide authentication solutions aligned to IAM standards.
• Monitor industry identity and authentication trends and engage peers to inform and evolve BAC’s security strategy.
• Apply industry best practices, standards, and documentation, recommending improvements based on practical experience.
• Build and maintain strong partnerships across Global Information Security (GIS) functions, Core Technology Infrastructure (CTI), Cyber Security Technology (CST), Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.
• Engage Product Managers and Senior Architects to align with the strategic identity and authentication technology roadmap.
• Collaborate with stakeholders to define identity and authentication requirements supporting long-term modernization across process, data, and technology.
• Influence tool owners to design and implement modern, efficient identity and authentication solutions that deliver sustainable risk reduction.
• Assess identity and authentication risks in business and technology decisions, ensuring compliance with internal policies and external regulatory requirements.
• Take ownership of identity and authentication risk management by proactively identifying issues, strengthening controls, and driving outcomes.
• Partner with IAM Governance leads to ensure that all authentication related IAM requirements are appropriately measured, reported, and governed.
• Actively participate in GIS IAM forums to support standards, controls, and Single Process Inventory (SPI) enhancements.
• Consult with business partners to identify gaps and governance issues and develop effective remediation strategies.
• Provide senior management with timely, transparent reporting on existing and emerging identity and authentication risks.
• Clearly communicate proposed changes through written materials and education sessions for team members and technology partners.
• Partner with policy governance teams to socialize and publish updates to identity and authentication standards.
• Support audit issue remediation, closure, and sustainability.

Identity and Access Management Analyst, Authentication Security

• Lead a cyber threat management team; set clear priorities and define actionable plans, ensuring alignment with organizational goals
• Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results
• Recognized as a cyber threat management expert, independently resolving the most complex challenges, and providing strategic direction on problem resolution across the security domain
• Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security initiatives that align with business needs and objectives
• Lead complex, high-impact security projects of diverse scope, applying an in-depth understanding of business trends and security challenges to develop innovative solutions that strengthen threat management and overall security posture
• Possess a keen awareness of the broader impact of decisions, with initiatives often leading to enterprise-wide improvements that enhance security practices, operational efficiency and organizational resilience
• act as incident commander for critical events, and ensure investigations meet regulatory and evidentiary standards
• translate threats into executive-level risk insights, drive post-incident improvements, and help PayPal stay ahead of evolving threats

Senior Manager, Cyber Incident Response – Threat Management

• Analyze complex cybersecurity problems to manage workstreams and develop deliverables
• Guide and mentor junior team members
• Build and sustain meaningful client relationships to drive engagement
• Work with team members to enhance operational effectiveness
• Uphold the firm's ethical standards and compliance requirements
• Analyze data to inform decision-making and improve outcomes

See all jobs on JobTailor

Senior Cybersecurity Analyst

Financial Intelligence Analyst

Threat Intelligence Analyst

Technical Incident Response Analyst

Senior Information Security Analyst

Cybersecurity Analyst

Senior Information Security Analyst

Enterprise Security Analyst I

Cyber Security Analyst, Database Configuration Monitoring

Cyber Security Analyst – Unix/Linux Configuration Monitoring

Financial Intelligence Analyst

AI Enablement and Security Analyst

Identity and Access Management Analyst, Authentication Security

Senior Manager, Cyber Incident Response – Threat Management

Senior Associate, Cyber Defense – Cyber Incident Response