Security Analyst

• Analyzing real-time cyber threat intelligence to stay ahead of emerging threats.
• Correlating security events to identify and prioritize potential incidents.
• Conducting in-depth network traffic analysis using raw packet data to uncover malicious activity.
• Collaborating with incident response teams to contain and eradicate threats.
• Investigate alerts generated from endpoints, IDS/IPS, NetFlow data, and custom sensors to detect compromises on customer networks.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, creating detailed technical reports outlining your findings.
• Triage security alerts to rapidly identify malicious actors targeting customer networks.
• Monitor and analyze DoD and open-source intelligence feeds to identify Indicators of Compromise (IOCs) and integrate them into security sensors and SIEMs.
• Report security incidents to customers and USCYBERCOM, ensuring timely communication and coordinated response.

Cybersecurity Analyst

• Responsible for the day-to-day administration, monitoring, and continuous improvement of Equity Resources' cybersecurity program
• Serve as the technical lead for security operations, Microsoft 365 security, identity and access management, data protection, AI governance, vulnerability management, incident response, and enterprise network security while partnering with business stakeholders to protect company and customer information
• Duties include Security Operations and Incident Response, Network Security, Microsoft 365 Security Administration, Data Protection, AI Governance, and Microsoft Purview, Identity and Access Management, Vulnerability and Risk Management, Compliance and Governance

Senior IT Security Analyst

• Perform information security risk analysis and risk management processes and technologies
• Provide research and operational support to teams within Information Security Management
• Work with cross-functional teams for several initiatives
• Help with reporting and metrics
• Assisting with central intake, triage requests, and tickets

Information Security Support Analyst I

• Respond and perform analysis on security alerts and incidents.
• Support technical investigations of complex or high-severity security threats or incidents.
• Coordinate information security incident response with SNHU's Information Security Incident Response Plan.
• Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents.
• Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts.
• Help perform investigations in complex or high-severity security threats or incidents.
• Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Review and help implement standard operational processes for handling common incident types.
• Demonstrate a deep source of ethics, integrity, and confidentiality.
• Can remain calm and function at the highest level during a crisis.

Information Security Analyst I

• Provides reporting, analytics, and portfolio management support to the BISO organization
• Develop and maintain BISO dashboards, scorecards, and executive reporting
• Analyze security metrics, trends, and performance indicators
• Ensure accuracy and integrity of dashboard data and reporting
• Automate reporting processes and improve data accessibility
• Support high-priority projects requiring additional coordination
• Maintain project documentation and status reporting
• Monitor project health and escalate potential risks
• Support audit, regulatory, and governance reporting requirements
• Conduct security assessments and other information security routines consistently

Security Analyst – Reporting, Analytics, Metrics

• Design, implement and maintain secure authentication and authorization architecture across firm systems and applications.
• Align cloud, network and technology infrastructure with zero trust security principles and industry best practices.
• Provide security guidance and best practices for cloud infrastructure, existing technology platforms, and new IT solutions.
• Manage the preparation, execution, and remediation of security assessments, risk reviews, and compliance activities.
• Develop, track and report on security metrics, key performance indicators (KPIs) and overall program effectiveness.
• Support the Security and Compliance Specialist with client-required compliance reviews by preparing and validating approved security artifacts and documentation.
• Assist with vendor security assessments by evaluating compliance gaps, developing remediation plans, and supporting implementation of required security controls.
• Review and monitor firm systems to ensure compliance with established security baselines, policies and standards.
• Manage, optimize and evaluate existing security tools and technologies while recommending and implementing solutions to strengthen the firm’s security posture.
• Develop, maintain, and monitor standardized security processes to ensure consistent application of controls across the firm.
• Ensure security requirements are incorporated into end-user access management, equipment provisioning, and technology lifecycle processes.
• Execute security, privacy, and risk-related audit activities while ensuring appropriate documentation and follow-up.
• Conduct security reviews of proposed software, vendors, applications, and technology projects to identify risks and recommend mitigation strategies.
• Monitor and enhance data protection practices, including network storage security, encryption standards, removable media controls, and remote access safeguards.
• Troubleshoot and resolve network security, access, and system integrity issues.
• Monitor emerging cybersecurity threats and vulnerabilities using industry resources, including government and law enforcement advisories, and communicate relevant risks to stakeholders.
• Partner with cross-functional teams to identify security improvements, operational efficiencies, and opportunities to strengthen technology controls.
• Recommend and lead security enhancements based on industry best practices related to threat management, vulnerability prevention, compliance, and monitoring.
• Conduct security incident investigations, document findings, coordinate remediation activities, and implement preventative measures.
• Analyze security incidents to identify root causes and provide recommendations to management to reduce the likelihood of future occurrences.

Information Security Analyst

• Monitor SIEM/alerts (Rapid7 InsightIDR, Microsoft Defender, Abnormal Security) on a 24/7 basis across KPI networks, servers, cloud platforms, and endpoints.
• Monitor for and respond to security alerts; perform first-level triage, containment, and isolation/restoration of affected systems.
• Conduct intrusion detection analysis, correlate events across systems, and document formal technical incident reports (e.g., Jira incident write-ups).
• Lead investigations of phishing, account compromise, and token-theft events, including mailbox review, removal of malicious inbox rules, and data-exposure assessment.
• Coordinate Security Incident Follow-up cadence with MDR/MSSP partners and execute response playbooks.
• Provide control evidence to auditors and supply logs, screenshots, and exported configurations on request.
• Serve as the primary technical contact for the SOC 2 Type 2 audit and the Ares Cyber Program quarterly reviews.
• Maintain logs and reports required for ongoing audit readiness and remediation tracking.
• Define PAM policies and implement supporting tooling.
• Perform recurring privileged-access reviews, monitor usage/logs, and track exceptions.
• Review and approve or deny privileged access requests.
• Define endpoint security baselines and track policy compliance across managed devices.
• Monitor EDR/NGAV coverage and disk encryption (BitLocker, USB encryption) and maintain audit trail.
• Partner with IT Operations and Compliance to validate Intune/ManageEngine patch deployment and address vendor-reported critical vulnerabilities.
• Design and maintain SPF/DKIM/DMARC, tune phishing filters (Abnormal/Defender), and track mail security settings.
• Investigate mail-borne threats, manage quarantine release decisions, and ensure audit coverage of mail security controls.
• Review backup security configurations, validate encryption, and participate in DR testing.
• Log DR test results and prepare related audit artifacts.
• Define network segmentation requirements and ensure segmentation policy is enforced.
• Maintain audit evidence for VLAN/firewall configurations and tune IDS/IPS/SIEM detections.
• Classify critical assets, maintain the asset control matrix, and map assets to audit scope.
• Flag unmanaged or "Not Monitored" devices and drive remediation.
• Tune DLP rules, deploy/maintain agents, and review DLP incidents.
• Partner with the Compliance Analyst to identify client data and intellectual property requiring protection.
• Enforce app protection and configure Intune/MDM device compliance policies.
• Track enrollment status and monitor access from managed devices.
• Drive SSO rollouts and conditional access design via Microsoft Entra.
• Perform monthly roster / ADP-to-AD reconciliation and produce active employee/contractor lists for leadership and audit.
• Audit offboarding to ensure terminated accounts remain disabled.
• Monitor for non-compliant platform usage and intervene as required to ensure compliance with KPI policies.
• Run phishing simulations (Microsoft Attack Simulation) and assign role-based training through KnowBe4, including Snyk for engineering staff.
• Customize training content, track completion, escalate non-completion, and share threat trends with the organization.
• Author and maintain enterprise security documents (policies, standards, baselines, guidelines, procedures) in Vanta, including the Incident Response Plan and Operations Security Policy.
• Compile and analyze data for management reporting, KPIs, and the Monthly Vulnerability & Risk Register Review and Weekly Threat Intelligence Review.
• Monitor threat intelligence feeds and apply MITRE ATT&CK and similar frameworks to identify TTPs.
• Serve as technical evaluator and primary point of contact for security vendors (Rapid7, Insight Assurance, Abnormal, KnowBe4, Intrust IT, Securden, Vanta, JFrog, Salesforce Security).
• Coordinate penetration testing engagements and review deliverables.

Threat Intelligence Specialist

• Analyze alerts, investigate incidents, and lead response activities across enterprise systems
• Act as Incident Commander and escalation point for high-severity incidents and post-incident reviews
• Perform threat hunting, retro hunting, and deep-dive analysis to identify advanced attack techniques
• Continuously improve detection and response workflows, playbooks, and automation
• Serve as the SME for AI detection and response, including threats such as prompt injection, model abuse, and data leakage
• Partner with business units to understand AI usage and provide guidance on secure implementation and monitoring
• Identify and onboard new telemetry sources for AI platforms and agentic workflows
• Translate emerging AI threats and industry trends into actionable detections and controls
• Provide hands-on mentorship and guidance to analysts during investigations and response efforts
• Set the technical standard for alert review, triage, detection quality, and investigation depth
• Lead by example in incident handling, documentation, and decision-making under pressure
• Support hiring, onboarding, and ongoing development of team members
• Design and maintain detection logic, playbooks, and workflows aligned to threat coverage and business risk
• Ensure detection capabilities support key objectives such as visibility, automation, and data quality
• Identify gaps in tooling, telemetry, and processes; recommend and drive long-term improvements
• Align detection and response strategies with frameworks such as MITRE ATT&CK and emerging AI threat models
• Partner with product owners, engineering teams, and vendors to translate business priorities into security solutions
• Organize and drive cross-functional initiatives to enhance detection and response capabilities and improve overall security maturity
• Support root cause analysis and remediation efforts across technical and business domains
• Communicate risk, threats, and security recommendations effectively to technical and non-technical stakeholders
• Contribute to strategic initiatives and influence security decisions across the organization
• Contribute to detection, analysis, and response for threats targeting CI/CD pipelines and software supply chains
• Improve visibility, telemetry, and detection coverage across the software development lifecycle
• Identify attack patterns and strengthen controls related to build systems, dependencies, and deployment workflows
• Stay current on attacker TTPs, tools, and frameworks, including AI, cloud, and supply chain threats
• Share insights through documentation, training sessions, and team knowledge transfer
• Foster a culture of experimentation, continuous improvement, and technical excellence

Principal Cyber Threat Analyst

• Analyzing real-time cyber threat intelligence to stay ahead of emerging threats.
• Correlating security events to identify and prioritize potential incidents.
• Conducting in-depth network traffic analysis using raw packet data to uncover malicious activity.
• Collaborating with incident response teams to contain and eradicate threats.
• Investigate alerts generated from endpoints, IDS/IPS, NetFlow data, and custom sensors.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations.
• Triage security alerts to rapidly identify malicious actors targeting customer networks.
• Monitor and analyze DoD and open-source intelligence feeds to identify Indicators of Compromise (IOCs).

• Assist with the development and execution of test plans and procedures for telecommunications priority services
• Support testing in wireline, wireless, IP, LTE, and emerging 5G environments under senior engineer guidance
• Document test results, observations, and issues for review by senior technical staff
• Help prepare technical reports and engineering documentation
• Participate in meetings and technical discussions with internal and external stakeholders
• Assist with Operations, Administration, Maintenance, and Provisioning (OAM&P) documentation and coordination activities
• Support review and analysis of proposed carrier implementations and operational processes
• Help prepare program documentation, presentations, and technical summaries
• Assist with cybersecurity documentation and compliance requirements for telecommunications systems
• Support the development and maintenance of security controls and cybersecurity artifacts
• Participate in security assessments, vulnerability reviews, and risk documentation activities under supervision
• Help maintain Interconnection Security Agreements (ISAs) and ATO-related materials

Telecommunications, Cybersecurity Analyst

• We are seeking a Security Analyst with an emphasis on fraud research to join our Information Security team.
• This role is responsible for identifying, researching, and helping mitigate computer-based and non-computer-based fraudulent activity across the organization.
• The analyst will support the investigation of suspicious activity, review trends and patterns that may indicate fraud risk, and help strengthen internal controls through monitoring, analysis, documentation, and reporting.
• This position works closely with the Director of Information Security and cross-functional business partners to support fraud prevention efforts, incident response, and risk management activities.

• Collaborating with security engineering teams to create and test detection rules.
• Investigating potential cybersecurity incidents.
• Developing response processes and training security operations staff.
• Reviewing and tracking detected events to identify new exploits, threats and mitigation strategies, and enforce incident reporting standards.
• Leading in-depth technical analysis of new and emerging information security threats.
• Analyzing threats and vulnerabilities to determine their impact to the bank's operations.
• Assisting with investigations and eDiscovery efforts involving court-proven forensic processes and technologies.

Lead Threat Hunter

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite
• Assist with tuning the SIEM events to reduce the false positives
• Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
• Demonstrate the ability to scope an event to ensure the proper remediation steps
• Perform operational support for the institution as a representative of the security organization
• Conduct security assessments and other information security routines consistently

Security Analyst – SOC

• Recording, tracking and dispositioning of Red Team observations and findings
• Review both past and emerging observations with governance and risk partners
• Produce presentation materials and technical write-ups from red team observations
• Supports activities, process, and tools needed to improve overall security posture of the organization
• Performs investigation and data loss prevention, data manipulation, and coordination of activities

Security Analyst – Red Team

• Protect the cyber assets of FirstEnergy across all subsidiaries and business units
• Apply current cyber security and information security strategies
• Collaborate with various teams and stakeholders
• Report to the Manager of Cyber Security Policy
• Respond to out-of-hours calls during on-call rotation

Cyber and Information Security Analyst – Cyber Security, TSOC

• Operationalize the Intel Lifecycle: Execute the full intelligence lifecycle to perform fusion analysis, develop adversary profiles focused on financial sector threats, produce finished intelligence products across tactical, operational, and strategic levels.
• Tactical Detection Support: Contextualize threat behavior and anticipate adversary actions, translate analyzed TTPs into technical signatures to directly support the SOC and Detection Engineering teams.
• Intelligence-Driven Threat Hunting: Collaborate with the Threat Hunting team to develop hypotheses based on observed adversary behaviors and regional trends, moving beyond simple Indicator of Compromise (IoC) matching.
• Threat and Vulnerability Context: Support attack surface management team, provide intelligence-driven vulnerability prioritization, identify emerging threats and exploitation trends.
• Adversary Emulation: Provide intelligence support for Red Team or Purple Team exercises by profiling relevant threat actors to ensure testing remains realistic and impactful.
• Strategic & Geopolitical Analysis: Analyze global conflicts and economic stability to translate complex threat activities into structured business solutions and "so-what" summaries for leadership.
• Program Development and Engagement: Contribute to the maturation of the CTI program by developing and refining collection requirements, intelligence workflows, reporting templates, and analytic tradecraft standards.
• Production and Reporting: Produce high-quality tactical, operational, and strategic intelligence products including daily threat briefings, threat actor profiles, vulnerability assessments, and executive threat summaries. Deliver timely and actionable intelligence to internal stakeholders.

Cyber Threat Intelligence Analyst

• Prioritize intelligence requirements (IR) and requests for intelligence (RFI), including developing intelligence targeting and collection plans
• Analyze cyber threats; engage stakeholders to determine impact to U.S. Bancorp.
• Monitor a wide array of diverse information sources, ranging from open-source to classified materials for potential threats.
• Maintain a detailed level of awareness of threats to the financial sector.
• Actively participate in the development, documentation, and implementation of new processes to expand and mature capabilities for the organization.

Security Analyst jobs in Ohio

See all jobs on JobTailor

Cybersecurity Analyst

Senior IT Security Analyst

Information Security Support Analyst I

Information Security Analyst I

Security Analyst – Reporting, Analytics, Metrics

Information Security Analyst

Cybersecurity Analyst

Principal Cyber Threat Analyst

Cybersecurity Analyst

Telecommunications, Cybersecurity Analyst

Security Analyst

Lead Threat Hunter

Security Analyst – SoD & Access Risk Management

Security Analyst – SOC

Security Analyst – Red Team

Cyber and Information Security Analyst – Cyber Security, TSOC

Cyber Threat Intelligence Analyst

Lead Cyber Threat Intelligence Analyst