Security Analyst

• Plan & Execute AI-Enhanced Attacks: Lead red team operations and penetration tests that incorporate LLM-driven techniques and agentic automation to simulate sophisticated adversaries at scale.
• Maintain human-in-the-loop oversight to ensure safe, controlled execution.
• Custom Tooling & Automation: Design or integrate custom offensive tools and scripts that use AI/ML (e.g. LLM APIs, automation frameworks) to accelerate vulnerability discovery, exploit development, and testing workflows.
• For example, develop internal frameworks that interface LLMs with red team C2 platforms (like MythicMCP, SliverMCP) to enable autonomous or semi-autonomous operations.
• Adversarial Simulation & Fraud Testing: Conduct adversarial exercises targeting both technical systems and fraud controls, using AI to emulate how attackers might abuse scale and automation.
• Work with fraud risk teams to simulate large-scale abuse scenarios (bots, deepfakes, automated scams) using AI capabilities.
• Collaboration & Purple Teaming: Partner closely with blue teams (SOC, Detection Engineering) and fraud prevention teams to share insights from AI-augmented tests.
• Help validate and improve detection and response for AI-driven attack techniques through joint purple team exercises.
• Reporting & Knowledge Sharing: Document attack scenarios, findings, and mitigations in clear reports. Present results and risk insights to both technical staff and executives, translating complex AI-augmented attack methods into actionable defense improvements.
• Mentor colleagues in adopting AI-assisted tools and foster a culture of innovation in the team.

Adversarial AI, Offensive Security Analyst

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Monitoring and triaging alerts from SIEM, endpoint, identity, and cloud security tools
• Investigating suspicious activity and escalating incidents in line with BCM One’s Incident Response Plan
• Supporting vulnerability and patch management efforts across business units
• Contributing to compliance activities such as SOC 2 and ISO 27001 through evidence collection and control testing
• Collaborating with IT and Engineering teams to enforce secure configurations and access controls
• Documenting procedures, findings, and operational playbooks to improve security operations over time
• Supporting security awareness initiatives and internal training efforts

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

Threat Intelligence Specialist

• supporting the advancement of the overall financial performance of Geisinger Health and its subsidiaries
• informing decision making and ensuring goal achievement by providing service and product line reporting and analytics
• supporting operating and capital forecasts, strategic service planning, business plan financial models
• providing leadership within the department by mentoring analysts and developing a high performing team
• providing regular presentations of financial performance to operational leadership as requested
• developing and promoting OneGeisinger analytical reporting to drive utilization and cost reduction
• providing episode analysis to understand utilization and cost of patient cohorts across the full care continuum
• maintaining repository for utilization and financial data to support operational and financial initiatives
• supporting financial acumen education for operational teams

Financial Intelligence Analyst Lead

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cyber security product suite
• Assist with tuning the SIEM events to reduce the false positives
• Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
• Demonstrate the ability to scope an event to ensure the proper remediation steps
• Perform operational support for the institution as a representative of the security organization
• Conduct security assessments and other information security routines consistently

Security Analyst – SOC

• Recording, tracking and dispositioning of Red Team observations and findings
• Review both past and emerging observations with governance and risk partners
• Produce presentation materials and technical write-ups from red team observations
• Supports activities, process, and tools needed to improve overall security posture of the organization
• Performs investigation and data loss prevention, data manipulation, and coordination of activities

Security Analyst – Red Team

• Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions
• Support SOC 1 Type 2 audit readiness and remediation initiatives
• Lead Quality Management System (QMS) audits
• Support Data Loss Prevention (DLP) initiatives and assessments
• Assist with Vendor Security Management Program activities
• Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)
• Validate system configurations for compliance with security standards
• Monitor server logs, network traffic, and security alerts
• Analyze findings and recommend remediation actions
• Assess and implement security patches, upgrades, or reconfigurations
• Support Windows infrastructure environments (e.g., Active Directory, Group Policy)
• Apply cloud security best practices across enterprise systems
• Maintain awareness of privacy and security frameworks (e.g., ISO 27701)
• Mentor junior cybersecurity staff and collaborate with senior team members
• Independently manage compliance projects and initiatives
• Report project status and compliance progress to leadership

Senior Cybersecurity Analyst

• Provide Functional Mission Analysis-Cyber assistance to identify weapon system’s critical information technology architecture and supporting infrastructure that aids in the warfighting mission.
• Perform Information Security Analyst functions.
• Investigate a diverse collection of network activities in cyberspace to determine essential Mission Relevant Terrain Cyber (MRT-C) support designed for command, control, processes, and systems.
• Develop a strategy to identify, evaluate, and minimize risks in the local cyberspace environment that are considered crucial for mission success.
• Create and implement strategies and techniques to merge and display relevant MRT-C, based on essential systems and network services.
• Identify and analyze trends to define MRT-C requirements and provide guidance and alignment services.
• Assist with FMA-C, identifying, mapping, and developing a defense plan to safeguard MRT-C.
• Establish databases to monitor systems, design and revise user boundaries, and create indexing to make searches easier.
• Utilize classified and unclassified networks and information portals to create support and information distribution plans for mission activities.
• Review and provide recommendations for establishing new or revised policies, procedures, objectives, and organization design for the staff, as necessary.
• Coordinate with local/base SMEs to resolve events and/or incidents & brief supporting recommendations and Courses of Actions.
• Define and perform vulnerability assessments leveraging threat analysis to scope and prioritize efforts.
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
• Coordinate with enterprise-wide cyber defense staff to validate network alerts.
• Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.

IT Security Analyst

• The Security Analyst will plan, implement, upgrade, and monitor security protocols for the protection of the organization’s computer networks and information.
• Handle matters that are particularly complex, often time-sensitive and confidential, supporting the SEPTA’s Legal, Audit and Investigative units.
• Responsible for reviewing business processes to identify gaps leading to potential data exposure.
• Integrate existing data protection methods into existing processes.
• Gather business requirements for data protection needs that are not met by existing data protection tools.
• Serve as a subject matter expert in Data Protection capabilities.

• The delivery, management, maintenance and tuning of information security data protection technologies (with focus on DLP)
• Maintain oversight of information security data protection support functions including policies, operational issues, training, budget and metrics
• Manage relationships with information security data protection partners (internal Aegon, and external vendors) and provide input into tooling strategy/solutions (e.g., DLP technology)
• Define and maintain oversight of the information security components of a global cohesive data protection strategy
• Maintain alignment with other global programs and stakeholders including general data governance and privacy
• Drive information security data protection improvements and work towards consistent globally agreed capabilities
• Complete research, development and implementation of straightforward information security initiatives, including review of policy, program, process, procedural and technology improvements and solutions to ensure they are current and meet business needs.
• Provide input, creates awareness and training materials and leads certain activities, such as hardcopy and online learning content, presentations, pamphlets, electronic communications (e.g., internal blogs).
• Perform certain procedural tasks found within control self-assessments and security exception/waiver processes, such as assessing controls and compliance with standards, assisting in management of exception reviews and recommending action plans.
• Perform certain procedural tasks found within third-party assessments, such as reviewing due-diligence artifacts, supervising tasks, reviewing results and recommending outcomes.
• Perform procedural tasks found within other security processes, such as information management, classification and protection.
• Ability to help employees and contractors understand their role in safeguarding information, technology and services.
• Assist and show where policies, processes and procedures can be found and explain why they should be followed.
• Tracks current and impeding laws, regulations and industry requirements and best practices, such as data protection, data privacy, cyber security and information security.
• Is able to translate requirements into practical solutions.
• Gathers data, analyzes and drafts reports, including department, project, key indicators and dashboards.
• Assists with requirements and improvement plans.
• Ability to quickly develop excellent working relationships with peers and key stakeholders, such as business partners, legal, internal audit, risk, and technology specialists.

Senior Information Systems Security Analyst – Information Security Data Protection

• Produce, analyze, and deliver recurring and ad hoc security metrics and reports to support GSFC leadership, executive committees, and Board-level reporting.
• Develop, maintain, and enhance dashboards and visualizations using Tableau, with a transition to Power BI, to communicate security trends, risks, and operational performance.
• Analyze security operations, threat activity, staffing models (gearing ratios), and tool utilization data to generate clear analytical summaries and actionable insights.
• Collaborate closely with subject matter experts across cyber defense functions, including threat intelligence, perimeter defense, security operations, and incident management, to ensure accuracy and relevance of reporting.
• Translate complex technical and security data into presentations and written materials suitable for senior leadership and cross-functional stakeholders.
• Ensure consistency, accuracy, and integrity of data through validation, documentation, and adherence to established data governance and access control requirements.
• Support internal audits, regulatory examinations, and risk assessments by providing timely, accurate, and well-documented metrics and analyses.
• Perform independent analytical work while maintaining regular engagement with stakeholders to understand evolving reporting needs and security priorities.
• Apply foundational security concepts to interpret data, assess trends, and identify opportunities to improve operational effectiveness and risk management.

Security Analyst – Data Analytics, Optimization

• Lead and support advanced SOC investigations, incident response activities, and Tier-3 escalations, providing deep technical analysis of security alerts, anomalous behavior, and suspected malicious activity
• Perform proactive threat hunting activities across enterprise security telemetry including SIEM, EDR, identity, network, and cloud logs to identify previously undetected or emerging threats
• Analyze attacker behaviors and intrusion patterns to develop threat hunting hypotheses and detection strategies aligned with the MITRE ATT&CK framework
• Investigate complex security alerts and incidents, performing log analysis, endpoint analysis, and timeline reconstruction to determine root cause, scope, and impact
• Leverage internal telemetry, alerts, and IOC trends to identify threat patterns targeting the organization and opportunities for improved detection coverage
• Enhance threat detection and response capabilities by supporting the development and improvement of SOC detection logic, response procedures, escalation playbooks, and analyst decision trees
• Conduct proactive analysis of alert trends to identify gaps in detection coverage and recommend new or improved monitoring capabilities
• Utilize Cyber Threat Intelligence (CTI) sources to contextualize incidents, inform threat hunting efforts, and prioritize investigations
• Monitor open-source, closed-source, and vendor-provided threat intelligence to stay abreast of emerging threats, vulnerabilities, and adversary tactics relevant to the organization
• Develop and maintain profiles of relevant threat actors, including tactics, techniques, and procedures (TTPs), and incorporate those insights into threat hunting and detection strategies
• Assist in SOC and Incident Response escalations, providing technical expertise and investigative support during security incidents
• Conduct threat, risk, and vulnerability assessments to provide actionable remediation and security control improvement guidance
• Collaborate with the Red Team and Cyber Incident Management to support red team exercises, incident response training, tabletop exercises, and detection validation
• Perform targeted access reviews and anomaly analysis across enterprise systems (Windows, Linux, databases, network infrastructure, cloud platforms) to identify suspicious activity
• Collaborate with DLP and other security teams on insider risk investigations and monitoring initiatives
• Contribute to the development and improvement of SOC procedures, threat hunting methodologies, and intelligence-driven detection processes
• Collaborate with relevant stakeholders on security awareness messaging and threat awareness related communications

See all jobs on JobTailor

Adversarial AI, Offensive Security Analyst

IT Security Analyst II

Security Analyst

Cybersecurity Analyst

Financial Intelligence Analyst Lead

Security Analyst – SoD & Access Risk Management

Security Analyst – SOC

Security Analyst – Red Team

Senior Cybersecurity Analyst

IT Security Analyst

Security Analyst

Senior Information Systems Security Analyst – Information Security Data Protection

Security Analyst – Data Analytics, Optimization

Senior Cyber Threat Analyst