Security Analyst

• Improve, manage, and provide direction re: LSAC Security Policies, Procedures, and Best Practices and maintain and enhance the formal Security Systems Program.
• Assist in the Development of effective Cybersecurity policies to address existing and future threats such as AI computer policies, data governance and compliance.
• Perform IT Security inspections, tests, system level audits and reviews of existing IT software and hardware to support and conduct the annual reviews to ensure compliance with SOC2, IT and Financial Audits, PCI/DSS, etc.
• Evaluate and recommend new Security products and services (hardware and software).
• Consult, monitor, and report on Security systems, e.g. such as intrusion prevention and detection systems, VPNs, and firewalls.
• Perform network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other computer systems and work with appropriate groups to close Security gaps.
• Develop and support the development of automated tools that analyze the Security violations found in access control logs to discover patterns and evidence of problems.
• Provide consultation and assistance to Infrastructure, Executive Staff, and other staff from other departments relating to information and systems Security.
• Maintain a high level of confidentiality in identifying and aiding in resolving Security issues.
• Monitor the networks and websites for the proper Security procedures, software configuration, and signs of compromise or attempted compromise.
• Actively promote and enhance Security Awareness programs to LSAC staff and partnering with the Human Resources Department.
• Participate in all Information Security projects and attend meetings to provide input and recommendations on issues that have an impact on LSAC’s Security infrastructure.
• Evaluate and recommend solutions to current or potential Security threats as they relate to the data and computing environment.
• Participate as a member of the Security Incident Response Team and Test Security Task Force.
• Respond to Security incidents providing critical documentation and consultation by preserving all records indicating changes made to access control lists to facilitate investigations, as well as involvement to the response, root cause analysis, and implementation of a solution.
• Keep abreast of the trends and issues in the industry related to Computer Security.

Senior Cybersecurity Analyst

• Provides reporting, analytics, and portfolio management support to the BISO organization
• Develop and maintain BISO dashboards, scorecards, and executive reporting
• Analyze security metrics, trends, and performance indicators
• Ensure accuracy and integrity of dashboard data and reporting
• Automate reporting processes and improve data accessibility
• Support high-priority projects requiring additional coordination
• Maintain project documentation and status reporting
• Monitor project health and escalate potential risks
• Support audit, regulatory, and governance reporting requirements
• Conduct security assessments and other information security routines consistently

Security Analyst – Reporting, Analytics, Metrics

• Support the SCRA Lead in executing Twilio's global security regulatory strategy
• Independently interpret complex and ambiguous regulatory frameworks and provide structured outputs
• Support the development and maintenance of regulatory repositories and systems of record, ensuring accuracy and audit readiness
• Execute and continuously improve the Cyber Regulation Intake & Triage process in partnership with Legal
• Map regulatory requirements to internal control frameworks, identifying gaps
• Develop regulator-ready and high-quality artifacts, including evidence mappings and control narratives
• Identify, analyze, and escalate regulatory risks and audit obligations
• Partner cross-functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams

Security Compliance and Regulatory Affairs Analyst

Threat Intelligence Specialist

• Own Salesforce Data Cloud administration — building and activating audiences, troubleshooting issues, and driving ongoing platform optimization.
• Safeguard marketing data quality by monitoring data flow across systems and resolving inconsistencies to keep platforms aligned.
• Build dashboards and reports that turn campaign and business data into clear, actionable insights for stakeholders.
• Partner with marketing teams to design and activate targeted audiences that power marketing programs.
• Manage intent data platforms and vendor relationships, fulfilling audience requests and supporting campaign targeting with reliable data delivery.
• Support marketing technology vendor evaluations and RFPs, helping select and manage tools that fit team needs.
• Own the project management platform end-to-end — workflows, request forms, automations, routing rules, and user support.
• Lead onboarding and training for marketing technology platforms, ensuring teams can use tools effectively and independently.
• Act as subject matter expert on Salesforce Data Cloud, intent data platforms, and project management tools, fielding questions and troubleshooting issues.
• Collaborate cross-functionally with marketing, operations, and technology teams to spot inefficiencies and implement scalable process improvements.
• Shape the roadmap for platform enhancements and data capabilities, recommending upgrades that boost operational efficiency.

Digital Intelligence Analyst

Incident Response Analyst

• Lead high‑fidelity alert investigations, performing deep technical analysis to rapidly identify, contain, and remediate threats.
• Own complex incident investigations, driving technically precise conclusions and elevating the organization’s detection and response maturity.
• Champion process development, identifying gaps, designing scalable workflows, and implementing improvements that strengthen the Incident Response program.
• Create and refine technical playbooks, documentation, and response guides, ensuring clarity, consistency, and operational excellence.
• Mentor and uplift junior analysts, providing guidance, coaching, and training to build a high-performing team.
• Serve as the escalation point for critical and ambiguous cases, applying advanced threat analysis and sound judgment under pressure.
• Collaborate with engineering, IT, Legal, HR, and business partners to resolve incidents holistically and drive enterprise-wide security improvements.
• Apply strong analytical and technical expertise to continuously enhance SOC processes, workflows, and response capabilities.
• Contribute to the evolution of our detection landscape, partnering with detection engineering to improve log ingestion, alert logic, and signal quality.
• Assess and mitigate AI‑related security risks, including model misuse, prompt injection, data leakage, and emerging automation attack vectors.
• Participate in an on‑call rotation, serving as a trusted responder for high‑severity incidents.

Senior Incident Response Analyst

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond.
• Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.
• Looking for a candidate currently living in the eastern time zone (EST)

Security Analyst – Mid-Atlantic region

• Design and operationalize a centralized talent intelligence framework that integrates workforce data, development activity, and program outcomes to enable strategic decision-making.
• Build scalable dashboards and data models that provide real-time visibility into talent development, skill progression, and program effectiveness.
• Deliver executive-ready insights that inform workforce planning, talent pipelines, and internal mobility strategies.
• Lead the strategy and optimization of development matching platforms (e.g., mentoring, job shadowing, talent marketplace), improving match quality, participation, and outcomes.
• Enable data-driven talent targeting by developing tools and approaches that support objective, insight-based program nominations.
• Partner with HR Business Partners, program leaders, and technology teams to translate business needs into impactful analytics solutions and data products.
• Leverage AI-enabled tools and workflows to enhance insights generation, scenario modeling, and user experience for leaders.
• Continuously improve data quality, integration, and measurement approaches to ensure scalable and reliable reporting.

Talent Intelligence, Program Analyst

• Assist with the development and execution of test plans and procedures for telecommunications priority services
• Support testing in wireline, wireless, IP, LTE, and emerging 5G environments under senior engineer guidance
• Document test results, observations, and issues for review by senior technical staff
• Help prepare technical reports and engineering documentation
• Participate in meetings and technical discussions with internal and external stakeholders
• Assist with Operations, Administration, Maintenance, and Provisioning (OAM&P) documentation and coordination activities
• Support review and analysis of proposed carrier implementations and operational processes
• Help prepare program documentation, presentations, and technical summaries
• Assist with cybersecurity documentation and compliance requirements for telecommunications systems
• Support the development and maintenance of security controls and cybersecurity artifacts
• Participate in security assessments, vulnerability reviews, and risk documentation activities under supervision
• Help maintain Interconnection Security Agreements (ISAs) and ATO-related materials

Telecommunications, Cybersecurity Analyst

• Perform incident response activities, including incident identification, assessment, and response
• Conduct malware analysis and event correlation using the Company’s security platforms and tools to assist in forensic analysis and cyber event response
• Effectively document results of cyber threat analysis and subsequent remediation and recovery
• Support the ongoing maintenance of the cyber kill chain for the company, focusing on phases of cyber-attack and remediation/mitigation for each phase
• Participate in identifying cyber risk and remediation, including processes, technologies, and metrics, ensuring ongoing adherence to global cyber security architecture standards
• Optimize a cyber security program that balances risk, compliance, and cost to align with the Company’s business goals and strategy
• Support daily and emergency help chain to business and resource units on the execution of the Company’s cyber security requirements
• Support the ongoing development of the cyber security program to ensure that consistently addresses current and emerging cyber threat

Cyber Security Analyst

• We are seeking a Security Analyst with an emphasis on fraud research to join our Information Security team.
• This role is responsible for identifying, researching, and helping mitigate computer-based and non-computer-based fraudulent activity across the organization.
• The analyst will support the investigation of suspicious activity, review trends and patterns that may indicate fraud risk, and help strengthen internal controls through monitoring, analysis, documentation, and reporting.
• This position works closely with the Director of Information Security and cross-functional business partners to support fraud prevention efforts, incident response, and risk management activities.

• Plan & Execute AI-Enhanced Attacks: Lead red team operations and penetration tests that incorporate LLM-driven techniques and agentic automation to simulate sophisticated adversaries at scale.
• Maintain human-in-the-loop oversight to ensure safe, controlled execution.
• Custom Tooling & Automation: Design or integrate custom offensive tools and scripts that use AI/ML (e.g. LLM APIs, automation frameworks) to accelerate vulnerability discovery, exploit development, and testing workflows.
• For example, develop internal frameworks that interface LLMs with red team C2 platforms (like MythicMCP, SliverMCP) to enable autonomous or semi-autonomous operations.
• Adversarial Simulation & Fraud Testing: Conduct adversarial exercises targeting both technical systems and fraud controls, using AI to emulate how attackers might abuse scale and automation.
• Work with fraud risk teams to simulate large-scale abuse scenarios (bots, deepfakes, automated scams) using AI capabilities.
• Collaboration & Purple Teaming: Partner closely with blue teams (SOC, Detection Engineering) and fraud prevention teams to share insights from AI-augmented tests.
• Help validate and improve detection and response for AI-driven attack techniques through joint purple team exercises.
• Reporting & Knowledge Sharing: Document attack scenarios, findings, and mitigations in clear reports. Present results and risk insights to both technical staff and executives, translating complex AI-augmented attack methods into actionable defense improvements.
• Mentor colleagues in adopting AI-assisted tools and foster a culture of innovation in the team.

Adversarial AI, Offensive Security Analyst

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Monitoring and triaging alerts from SIEM, endpoint, identity, and cloud security tools
• Investigating suspicious activity and escalating incidents in line with BCM One’s Incident Response Plan
• Supporting vulnerability and patch management efforts across business units
• Contributing to compliance activities such as SOC 2 and ISO 27001 through evidence collection and control testing
• Collaborating with IT and Engineering teams to enforce secure configurations and access controls
• Documenting procedures, findings, and operational playbooks to improve security operations over time
• Supporting security awareness initiatives and internal training efforts

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

• supporting the advancement of the overall financial performance of Geisinger Health and its subsidiaries
• informing decision making and ensuring goal achievement by providing service and product line reporting and analytics
• supporting operating and capital forecasts, strategic service planning, business plan financial models
• providing leadership within the department by mentoring analysts and developing a high performing team
• providing regular presentations of financial performance to operational leadership as requested
• developing and promoting OneGeisinger analytical reporting to drive utilization and cost reduction
• providing episode analysis to understand utilization and cost of patient cohorts across the full care continuum
• maintaining repository for utilization and financial data to support operational and financial initiatives
• supporting financial acumen education for operational teams

Financial Intelligence Analyst Lead

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite
• Assist with tuning the SIEM events to reduce the false positives
• Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
• Demonstrate the ability to scope an event to ensure the proper remediation steps
• Perform operational support for the institution as a representative of the security organization
• Conduct security assessments and other information security routines consistently

Security Analyst – SOC

• Recording, tracking and dispositioning of Red Team observations and findings
• Review both past and emerging observations with governance and risk partners
• Produce presentation materials and technical write-ups from red team observations
• Supports activities, process, and tools needed to improve overall security posture of the organization
• Performs investigation and data loss prevention, data manipulation, and coordination of activities

Security Analyst – Red Team

• Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions
• Support SOC 1 Type 2 audit readiness and remediation initiatives
• Lead Quality Management System (QMS) audits
• Support Data Loss Prevention (DLP) initiatives and assessments
• Assist with Vendor Security Management Program activities
• Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)
• Validate system configurations for compliance with security standards
• Monitor server logs, network traffic, and security alerts
• Analyze findings and recommend remediation actions
• Assess and implement security patches, upgrades, or reconfigurations
• Support Windows infrastructure environments (e.g., Active Directory, Group Policy)
• Apply cloud security best practices across enterprise systems
• Maintain awareness of privacy and security frameworks (e.g., ISO 27701)
• Mentor junior cybersecurity staff and collaborate with senior team members
• Independently manage compliance projects and initiatives
• Report project status and compliance progress to leadership

Security Analyst jobs in Pennsylvania

See all jobs on JobTailor

Senior Cybersecurity Analyst

Security Analyst – Reporting, Analytics, Metrics

Security Compliance and Regulatory Affairs Analyst

Digital Intelligence Analyst

Senior Incident Response Analyst

Security Analyst – Mid-Atlantic region

Talent Intelligence, Program Analyst

Telecommunications, Cybersecurity Analyst

Cyber Security Analyst

Security Analyst

Adversarial AI, Offensive Security Analyst

IT Security Analyst II

Security Analyst

Cybersecurity Analyst

Financial Intelligence Analyst Lead

Security Analyst – SoD & Access Risk Management

Security Analyst – SOC

Security Analyst – Red Team

Senior Cybersecurity Analyst