Security Analyst

• Plan & Execute AI-Enhanced Attacks: Lead red team operations and penetration tests that incorporate LLM-driven techniques and agentic automation to simulate sophisticated adversaries at scale.
• Maintain human-in-the-loop oversight to ensure safe, controlled execution.
• Custom Tooling & Automation: Design or integrate custom offensive tools and scripts that use AI/ML (e.g. LLM APIs, automation frameworks) to accelerate vulnerability discovery, exploit development, and testing workflows.
• For example, develop internal frameworks that interface LLMs with red team C2 platforms (like MythicMCP, SliverMCP) to enable autonomous or semi-autonomous operations.
• Adversarial Simulation & Fraud Testing: Conduct adversarial exercises targeting both technical systems and fraud controls, using AI to emulate how attackers might abuse scale and automation.
• Work with fraud risk teams to simulate large-scale abuse scenarios (bots, deepfakes, automated scams) using AI capabilities.
• Collaboration & Purple Teaming: Partner closely with blue teams (SOC, Detection Engineering) and fraud prevention teams to share insights from AI-augmented tests.
• Help validate and improve detection and response for AI-driven attack techniques through joint purple team exercises.
• Reporting & Knowledge Sharing: Document attack scenarios, findings, and mitigations in clear reports. Present results and risk insights to both technical staff and executives, translating complex AI-augmented attack methods into actionable defense improvements.
• Mentor colleagues in adopting AI-assisted tools and foster a culture of innovation in the team.

Adversarial AI, Offensive Security Analyst

• Your primary work will involve using our SIEM platform to fully investigate network security events, documenting your investigations in writing via ticketing system, communicating with stakeholders, and resolving any identified issues.
• Gather and analyze intelligence from a variety of sources and communicate a summary of impactful intelligence to internal stakeholders.
• You will be responsible for identifying tuning opportunities and additional SIEM rules/use cases based on the everchanging threat landscape and needs of the organization.
• Provide threat and vulnerability management oversight and communicate threat and vulnerability observations clearly to leaders and subject matter experts, properly relaying risk factors.
• You will work with other Subject Matter Experts within the Security Services team to deliver a unified security service experience to all markets while also leveraging each other’s expertise and services to improve existing processes.
• You will work closely with the Log Collection and Platform management team to identify and implement automations for common use cases for more efficient response and resolution.
• You will lead brand collaboration calls to highlight detections identified within the market, including details such as resolution status and follow up, to ensure events are fully documented and resolved.

Senior IT Security Analyst

• Support the Texas Comptroller of Public Accounts on the Centralized Accounting and Payroll/Personnel System (CAPPS) Program.
• Deliver highly advanced, senior-level consultative services and technical assistance in support of CAPPS security architecture, configuration, and compliance across HR/Payroll, Financials, STARR, and all ancillary systems.
• Manage and enforce the CAPPS security framework, including role-based access control, segregation of duties, identity governance, and secure third-party integrations.
• Provide Level 2 Service Desk support, system configuration and maintenance, and participation in major incident management, disaster recovery, and audit activities.
• Monitor and analyze authentication, authorization, and privilege escalation logs for suspicious behavior; coordinate findings with the CPA Information Security Office.
• Oversee secure integration of third-party applications via SAML, OAuth, OIDC, SCIM, and custom APIs.
• Respond to and investigate identity-related security incidents, including account compromise, unauthorized access, and fraud indicators.
• Review, validate, and suggest approval for all assigned security deliverables related to CAPPS Architecture, System Development Lifecycle, Disaster Recovery, and Security Plans (SSP).
• Plan, design, develop, deploy, support, and maintain system configurations and modifications for the CAPPS HR/Payroll application to ensure accuracy, efficiency, and policy adherence.
• Ensure all digital products and content meet WCAG 2.1 accessibility standards, regularly reviewing for compliance and implementing remediation as needed.

ERP Security Analyst, CAPPS Systems Specialist

• Oversee IAM workflows including account lifecycle management, provisioning, de-provisioning, and access reviews within the TDIS and CAPPS ERP environment.
• Manage and enforce role-based access control (RBAC) and least privilege models across ERP and connected systems.
• Design, maintain, and remediate Segregation of Duties (SoD) rules across business processes within CAPPS multi-tenant applications.
• Monitor authentication, authorization, and privilege escalation logs for suspicious activity and coordinate findings with the CPA Information Security Office.
• Oversee secure integration of third-party applications via SAML, OAuth, OIDC, SCIM, and custom APIs.
• Implement, support, and maintain PathLock products including User Access Review (UAR), Single Sign-On (SSO), Data Masking, and A360.
• Ensure all digital products and content meet WCAG 2.1 accessibility standards, conducting regular compliance reviews and implementing remediation as needed.
• Assist with contract management oversight responsibilities including IT control audits, SLA monitoring, technical reviews of contract templates and workflows, and compliance reporting.
• Review and recommend approval for technical deliverables related to CAPPS architecture, system development lifecycle, disaster recovery, and security plans.
• Participate as a security advisor during CPA procurement cycles, including drafting solicitation documents, providing technical specifications, and advising during evaluation and negotiation phases.

ERP Security Analyst – CAPPS IAM, Security Specialist

Threat Intelligence Specialist

• Utilize source tools to identify and monitor incidents and potential threats globally&nbsp;
• Based on given criteria, identify events that could impact business continuity and the safety of our customers and their employees&nbsp;
• Communicate critical information effectively and with urgency and provide updated information as necessary&nbsp;&nbsp;
• Ensure that all information is delivered with the highest level of accuracy and speed&nbsp;
• Work with AlertMedia's Global Intelligence team to continuously update sources to ensure the highest level of monitoring and knowledge&nbsp;

Contract Global Intelligence Analyst, Tues & Thurs – Sat, 2:00pm-12:00am CT

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

• Appropriately scope, research, and prepare competitive intelligence reports and analysis in response to specific target opportunities
• Conduct Competitive Intelligence research on law firms, industries, clients, and market trends
• Develop Intelligence Briefs (Company Level) and Industry Briefs (Market/Industry Level) by researching individual companies and markets/industries then synthesizing results into summary form, including: company overview and areas of opportunities, industry overview and trends, key contacts and market segments, prospect lists by industry, transactions lists
• Demonstrate ability to transform complex data into actionable business insights through the analysis of large datasets and the effective use of data analytics tools such as Excel and Power BI
• Apply AI-powered research and business intelligence tools to strengthen research capabilities and identify emerging trends and opportunities
• Locate market information for development of client and target lists
• Exercise judgment and accountability in meetings or communicating effectively around deadlines
• Perform highly reliable quantitative and qualitative analysis, projections and plans, presenting interpretations and recommendations to senior management
• In collaboration with senior information professionals, develop strategic advice on how best to leverage internal and external resources to address challenges faced by the firm and its attorneys
• Proactively track Holland & Knight's competitive position in geographic locations, industries and practices
• Develop an understanding of each section and practice group’s targets, needs, and goals; assisting with materials and information to help shape plans and competitive positioning
• Grow individual subject matter expertise (SME) in the legal competitive intelligence field, maintaining some knowledge of trends and industry developments
• Establish and maintain an understanding of the information needs, workflow, and preferences of users and stakeholders in order to support and improve ease of access to information
• Attend research training, legal vendor training, knowledge sharing sessions, and other continuing education toward maintaining highest quality service output
• Support the firm's information resource stewardship; complying with all information security, privacy, confidentiality and licensing requirements while educating all users on the same
• Expected to maintain a regular and predictable work schedule and full attention to and engagement in work activities on behalf of the firm during business hours unless otherwise approved or required by applicable law
• Special projects and duties as assigned

Competitive Intelligence Analyst

• Execute daily SoD scans to identify potential and effective access violations
• Monitor, triage, and investigate SoD violations, ensuring timely resolution or escalation
• Provide on-demand support to end users and business stakeholders to analyze and remediate access conflicts
• Partner with application owners and access request teams to validate and resolve violations in alignment with policy
• Build, configure, and maintain toxic combination rules within Oracle Identity Manager (OIM)
• Contribute to the design and improvement of SoD control framework within PNC IAM program
• Drive continuous improvement in automation, reporting, and processes related to SoD

Security Analyst – SoD & Access Risk Management

• Direct proactive threat hunting campaigns to reveal advanced adversary activity
• Lead high-complexity hunting campaigns informed by threat intelligence and business risk
• Document hunting approach, research, and outcomes with actionable insights
• Leverage statistical and ML-based hunting methods to analyze large datasets
• Partner with Detection Engineering to convert hunt findings into durable detections
• Develop simple tools and automated solutions for hunting workflows
• Work closely with CSIRT, Threat Intelligence, Red Team, Security Engineering, and product teams
• Mentor others and share knowledge to raise the overall maturity and efficiency

Staff Cyber Threat Hunter

• Develops and administers security programs and procedures for classified or proprietary materials, documents, and equipment
• Studies and implements federal security regulations that apply to company operations
• Prepares manuals outlining regulations, and establishes procedures for handling, storing, and keeping records
• Conducts security education classes and security audits
• Investigates security violations and prepares reports specifying preventive action to be taken
• Prepares and maintains facility accreditation paperwork, to include Concept Validation and Fixed Facility Checklist (FFC)
• Provides support and expertise for all aspects of construction security of USAFWS SCIF/SAPFs
• Establishing and ensuring procedures to control construction site access are implemented
• Evaluates compliance of vault/SCIF activities with security requirements

Contractor Program Security Officer – Industrial Security Analyst 3

• Partner with the business to define and implement an information security strategy
• Manage issues and track remediation in partnership with business units and cybersecurity teams
• Coordinate customer security queries with business units and customer trust team
• Lead development of security go-to-market materials related to Legal products
• Collaborate with security architects to discuss potential solutions supporting business strategy
• Facilitate engagements to identify projects that enable business development and ensure necessary security controls are in place

Lead Information Security Analyst

• Monitor and analyze security alerts and events using SIEM and other security monitoring tools.
• Perform initial incident triage, investigation, and categorization of security events (Tier 1/L1 support).
• Escalate suspicious or high-risk incidents to senior analysts and incident response teams when required.
• Create, update, and manage incident tickets with accurate and detailed documentation.
• Communicate effectively with end users, stakeholders, and internal teams during security investigations.
• Follow established incident response procedures, playbooks, and operational processes.
• Provide regular updates to shift leads and SOC management regarding incident status and key events.
• Monitor threat intelligence feeds and stay informed about emerging cyber threats and attack trends.
• Support observability and monitoring platforms to enhance security visibility across the environment.
• Contribute to continuous improvement initiatives that strengthen security operations and detection capabilities.

Security Analyst – Intern

• Support the development, implementation, and monitoring of security policies and controls
• Collaborate with Global Security to ensure alignment with enterprise security standards and frameworks
• Investigate security incidents and collaborate with internal teams for effective resolution
• Coordinate post-incident reporting and remediation
• Partner with the Vulnerability Management team to drive vulnerability remediation, recommend controls, create playbooks
• Conduct periodic access reviews and report security access violations
• Create and deliver high-quality written communications on security, compliance, and audit issues
• Support internal security projects, automation efforts, and process improvements
• Adopt and extend AI-assisted security tooling to reduce toil, accelerate investigations, augment, and simplify recurring security workflows
• Collaborate with engineering teams to embed security best practices into the software development lifecycle (SDLC) and cloud environments
• Perform security assessments of new products and services to ensure the adequacy of security and privacy.

Senior Cyber Security Analyst

• Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions
• Support SOC 1 Type 2 audit readiness and remediation initiatives
• Lead Quality Management System (QMS) audits
• Support Data Loss Prevention (DLP) initiatives and assessments
• Assist with Vendor Security Management Program activities
• Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)
• Validate system configurations for compliance with security standards
• Monitor server logs, network traffic, and security alerts
• Analyze findings and recommend remediation actions
• Assess and implement security patches, upgrades, or reconfigurations
• Support Windows infrastructure environments (e.g., Active Directory, Group Policy)
• Apply cloud security best practices across enterprise systems
• Maintain awareness of privacy and security frameworks (e.g., ISO 27701)
• Mentor junior cybersecurity staff and collaborate with senior team members
• Independently manage compliance projects and initiatives
• Report project status and compliance progress to leadership

Senior Cybersecurity Analyst

• Manage day-to-day Next Gen firewall administration, including policy management, rule tuning, and health monitoring.
• Configure and maintain Web application Firewall policies.
• Configure and manage Security, NAT, QoS, and decryption policies.
• Perform quarterly review of access control list and firewall policies.
• Ensures network security rules, standards, and architecture is adequate to safeguard the CNP network.
• Review system configurations.
• Implement automation scripting to improve Network Security Operations and Services Develop dashboards and provide routine metrics data collection.
• Support firewall lifecycle activities from pre-installation preparation through network integration.
• Execute testing and validation for new deployments, policy changes, and upgrades.
• Coordinate deployment and go-live activities with minimal disruption to production traffic.
• Maintain documentation and configuration baselines following significant changes.
• Manage and optimize Network Segmentation environment and zones.
• Configure and manage Client Remote access solutions.
• Manage and support PGP encryption.
• Configure and maintain IDS/IPS, URL content filter and DLP operations, including profile management, incident review, and policy refinement.
• Advises departments on policies and security best practices, providing training as required.
• Serves as the subject matter expert for security best practices, policies, and regulatory requirements.
• Provides support and assistance during internal and external audits.
• Interfaces with technical vendors regarding security issues and recommend solutions.
• Develops network security standards.
• Develops network security architecture designs.
• Ability to author technical documentation

Senior Network Security Analyst – Web Application Firewalls

• Design, implement, configure, and maintain RSA Archer solutions, with emphasis on: Assessment & Authorization (A&A) Controls Assurance Program Management Issues Management Custom Archer applications System integrations
• Perform detailed business and functional requirements gathering and analysis.
• Translate requirements into: Solution designs Configuration specifications User stories Implementation plans
• Configure and customize Archer applications including: Questionnaires and surveys Forms and data fields Workflows and approvals Calculations and data relationships Access controls and role-based permissions Data feeds and automated imports
• Develop and integrate RESTful and web services to enable API connectivity between Archer and external enterprise systems (e.g., ServiceNow or other ITSM, CMDB, or risk platforms).
• Implement client-side logic, validations, and dynamic behaviors using JavaScript and jQuery within Archer applications.
• Produce and maintain technical documentation covering: System design and configuration Integration specifications Testing plans and results Change requests and deviations Process transformation artifacts Project management documentation using standard templates
• Utilize project management and tracking tools to monitor development progress, deliverables, risks, and milestones.
• Follow established change management, release management, and governance processes for all deployments to production environments.
• Provide troubleshooting, defect resolution, and performance optimization for Archer applications.
• Support end-user adoption through knowledge transfer, training materials, and solution walkthroughs.

Network Security Analyst II – RSA Archer Specialist

• Conduct comprehensive technical reviews to identify potential flaws in our products (focus on HIPAA and FedRamp)
• Engage in reporting and data analysis tasks.
• Participate in cross-functional projects and act as a trusted advisor, collaborating among others with Legal, Engineering, Product, and GRC teams.
• Provide technical expertise in customer meetings and sales engagements.

Senior Security Compliance Analyst

• Support the Cybersecurity Incident Response Team by keeping incident activities, tasks, and follow-ups organized and on track
• Capture notes, timelines, decisions, and action items from incident response activities to ensure accurate and consistent records
• Create, update, and maintain incident response documentation such as playbooks and process flows
• Maintain trackers, dashboards, and shared repositories that provide visibility into incident response projects
• Partner closely with incident response and leadership to coordinate priorities and ensure follow through
• Support readiness efforts by coordinating tabletop exercises, training materials, and onboarding resources
• Identify opportunities to improve team workflows or processes and implement improvements over time
• Audit management and tracking of remediation items and/or findings to completion
• Collaborate with business partners to manage Cybersecurity needs
• Initiate, facilitate and promote Cybersecurity within the organization and monitor adherence to Cybersecurity policies, standards and controls
• Ensure effective communication and partnership with all departments at GMF and serve as a liaison of Cybersecurity and first point of contact for Cybersecurity concerns
• Represent the Global Cybersecurity organization on projects as needed.

Associate Cybersecurity Analyst – Incident Response

• Be a member of a team responsible for all aspects of Cyber Defense within 7-Eleven
• Develop understanding of required job skills and apply company policies to moderate difficulty issues
• Work with direction from subject matter experts
• Incident response: triage, playbooks, investigation, write-ups, escalations
• Forensic analysis, malware analysis, protocol analysis, endpoint protection, data loss prevention, email security, PKI and certificate issuance, cyber threat intelligence
• Assist in maintaining cyber security policies, standards, processes, and workflows as directed

• Monitor and triage alerts across multiple client environments using SIEM, EDR, and other security telemetry
• Investigate suspicious activity, contain incidents, and document findings clearly
• Tune detections, reduce false positives, and contribute to the playbook library
• Perform Tier 2 escalations — phishing, malware, lateral movement, identity compromise
• Participate in client-facing meetings: monthly reviews, incident debriefs, security posture conversations
• Help shape security strategy recommendations for MSSP clients (controls, hardening, roadmap input)
• Stay current on threat actor TTPs, emerging vulnerabilities, and platform updates

See all jobs on JobTailor

Adversarial AI, Offensive Security Analyst

Senior IT Security Analyst

ERP Security Analyst, CAPPS Systems Specialist

ERP Security Analyst – CAPPS IAM, Security Specialist

Contract Global Intelligence Analyst, Tues & Thurs – Sat, 2:00pm-12:00am CT

Cybersecurity Analyst

Competitive Intelligence Analyst

Security Analyst – SoD & Access Risk Management

Staff Cyber Threat Hunter

Contractor Program Security Officer – Industrial Security Analyst 3

Lead Information Security Analyst

Security Analyst – Intern

Senior Cyber Security Analyst

Senior Cybersecurity Analyst

Senior Network Security Analyst – Web Application Firewalls

Network Security Analyst II – RSA Archer Specialist

Senior Security Compliance Analyst

Associate Cybersecurity Analyst – Incident Response

Senior Cyber Security Analyst

Security Analyst