Security Analyst

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Interpret advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to incorporate them into scenario development
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers and external customers as needed
• Scenario development, environment setup, and participant scheduling.
• Develop and deliver pre-exercise briefings and post-exercise debriefs.
• Conduct targeted training sessions to maximize participant learning and skill development.
• Serve as a primary point of contact for wargame participants, internal cybersecurity teams, and other stakeholders.
• Address inquiries regarding exercise objectives, logistics, and outcomes.
• Collaborate with internal cybersecurity teams and external experts.
• Design realistic, challenging, and relevant wargame scenarios (business-focused tabletop exercises).
• Base scenarios on current threat intelligence and organizational risks.
• Create engaging exercise materials, including rulebooks, scenario injects, and technical playbooks.

Senior Information Security Analyst – Wargame Facilitator

• Must be located in NW Arkansas: In Office Hybrid Position
• Monitor, and investigate security alerts and events across enterprise environments
• Perform proactive threat hunting activities to identify malicious behavior and vulnerabilities
• Support incident response efforts including assessment, containment, investigation, and remediation
• Use Splunk SIEM for log analysis, correlation, detection, and monitoring
• Work with EDR technologies including Cisco AMP, CrowdStrike, and Trend Micro, Microsoft Defender
• Help with vulnerability management activities and exposure analysis
• Coordinate with third-party patch management providers to validate remediation efforts
• Investigate suspicious activity, malware infections, phishing attempts, and endpoint threats
• Document incidents, findings, and remediation recommendations
• Collaborate with IT, infrastructure, and security teams across multiple regions
• Help improve detection logic, monitoring processes, and security operational

Security Analyst II, NW Arkansas

• Perform and mature enterprise risk assessments using frameworks such as NIST CSF, NIST 800-53, SOC 2, and CIS
• Analyze vulnerability assessment reports to support troubleshooting, remediation, and risk reduction initiatives
• Develop and execute security awareness programs, including training, phishing simulations
• Deliver actionable reporting and insights, including assessment results and GRC metrics
• Perform end-to-end cyber third-party risk assessments
• Drive process and tooling optimization
• Support governance and control management
• Enable audit readiness and due diligence
• Stay current on evolving regulations, frameworks, and industry trends
• Manage priorities and execution using Agile methodologies

Security GRC Analyst

Threat Intelligence Specialist

• Provide high level security system analysis including proactive policy evaluation and tuning.
• Lead the research and resolution of complex and/or escalations issues, including technical troubleshooting calls with Customer/other Verizon teams.
• Manage complex changes and vendor interaction.
• Creation of security documentation, including policies, procedures, training documents playbooks and operations manuals.
• Liaise with Verizon and customer’s senior management and other Verizon teams on service improvement initiatives.
• Provide mentorship and team lead functions, including supervision of staff, escalation management, and performance appraisal contributions.

Public Sector Threat Hunter

• Own the Mission Critical vendor portfolio: maintain the tiered list, validate it against business impact analysis findings, support exit and failover planning, and drive risk treatment for single points of failure with Procurement, Business Continuity, and business owners
• Manage the Highest-Risk vendor portfolio: keep security, privacy, and compliance assessment depth aligned to active vendor exposure, and drive remediation with the relevant domain teams
• Support vendor incident response: vendor-side impact assessment, business-owner coordination, and post-incident risk treatment
• Run inherent risk assessments through the intake workflow: review agent-prefilled tiering, evaluate vendor controls and evidence across security, privacy, compliance, and operational risk, determine residual risk, and route to domain reviewers where deeper assessment is warranted
• Operate the TPRM issue management workflow: document findings with clear risk statements, assign owners, track treatment to closure
• Tune and maintain the TPRM Risk Agent alongside the team through prompt development, backtest calibration, error analysis, and output QA
• Contribute to KPI/KRI reporting on portfolio coverage and cycle time

Third Party Risk Analyst, Security GRC

• Conduct regular vulnerability assessments and penetration testing on systems, networks, and applications.
• Identify and analyze security vulnerabilities using various tools and techniques.
• Develop and implement strategies to mitigate identified vulnerabilities.
• Monitor and respond to security incidents and alerts.
• Collaborate with IT and development teams to ensure security best practices are integrated into the development lifecycle.
• Prepare detailed reports and documentation on findings, recommendations, and remediation efforts.
• Stay up-to-date with the latest cybersecurity trends, threats, and technologies.

Principal Cybersecurity – Vulnerability Analyst

• Independently assess, document, and monitor cybersecurity risks with third-party vendors
• Evaluate vendor security controls and review assurance evidence
• Communicate directly with vendors for validations and risk mitigation activities
• Lead cybersecurity risk assessments and due diligence reviews
• Develop testing plans and coordinate reporting of data security incidents
• Provide technical support in risk assessments and implementing security procedures

Senior Third Party Cybersecurity GRC Analyst

• Perform front line monitoring, security event response, triage, remediation and recovery activities for security events affecting ePlus’ information assets
• Perform proactive and reactive incident response lifecycle activities, including detection, triage, analysis, containment, eradication, recovery and reporting
• Leverage a variety of information sources and indicators, including SIEM technologies, system log and network flow data, manual reports and observations, to differentiate between non-consequential events and those that require further investigation and or incident response activities
• Functions as incident handler to rapidly contain and correct identified issues and events, escalating as necessary and minimizing the potential for events to evolve to the level of a significant incident
• Assist with the selection, deployment, operation, administration, and maintenance of security event detection and related technologies
• Provide routine reporting on security event and incident handling activities
• Contribute to the evolution and continuous improvement of technical solutions, process/procedures, and documentation for incident response, threat intelligence, advanced persistent threat detection and vulnerability analysis
• Support and administer other areas of security, incorporating knowledge and insight gained to help evolve and adapt the security monitoring and incident response function

• Support the Enterprise Fraud Risk Management Program (EFRMP) by identifying, assessing, and mitigating fraud risks across the organization.
• Combine fraud risk management, investigative analysis, open-source intelligence (OSINT), cybersecurity collaboration, and enterprise reporting to help protect organizational assets, financial integrity, and mission-critical operations.
• Conduct research and analytical assessments to identify emerging fraud trends, schemes, and operational risks.
• Utilize Open-Source Intelligence (OSINT), commercial intelligence sources, public records, and internal data to support fraud investigations.
• Analyze internal and external fraud indicators to identify patterns, anomalies, and potential control weaknesses.
• Produce analytical reports and recommendations supporting fraud prevention and risk reduction initiatives.
• Collaborate with cybersecurity teams to identify fraud activities with cyber-related indicators or technical components.
• Provide analytical support throughout fraud investigations involving suspected internal or external fraud.

Fraud Risk & Intelligence Analyst

• Support Nightingale College’s security operations and vulnerability management activities
• Monitor security events and coordinate investigations and remediation
• Perform vendor security assessments and manage third-party risks
• Maintain assessment documentation and support reporting processes
• Operate vulnerability management workflows and support access governance and security process improvement

Senior Analyst, Cyber Security

• Serve as the primary internal point of contact and liaison for our 24/7 Managed Detection and Response (MDR) service provider.
• Own the internal response and coordination workflow when our external security partner escalates a validated, high-severity threat.
• Routinely review managed security portals, threat hunting reports, and endpoint/XDR coverage status across our remote workforce.
• Manage the technical integration of security alerts into internal team communication channels and centralized IT ticketing platforms.
• Perform daily triage and manual investigation of cloud productivity suite signals, access logs, and application-layer telemetry not fully covered by external tools.
• Gather and package evidence logs from endpoint managers, identity providers, and ticketing systems to support our ongoing SOC 2 compliance frameworks and internal audits.

Cybersecurity Analyst

• Monitor, triage, investigate, and resolve security events and incidents within established client service-level agreements.
• Perform advanced analysis across SIEM, EDR, IDS/IPS, firewall, DNS, identity, cloud, operating system, application, and database telemetry.
• Lead or support incidents through the full incident response lifecycle, including preparation, identification, analysis, containment, eradication, recovery, and post-incident improvement.
• Correlate network, endpoint, identity, and log evidence to determine attack scope, impact, root cause, and recommended remediation.
• Recognize common attack techniques and provide practical containment and remediation guidance appropriate to the affected environment.
• Serve as the first escalation point for junior analysts, providing a second review of investigations, validating conclusions, and coaching analysts through complex decisions.
• Advise on alert tuning, detection quality, false-positive reduction, rule logic, thresholds, suppression criteria, and documentation improvements with the Detection Engineering Team.
• Communicate directly and professionally with clients by telephone, email, and meetings, clearly explaining security findings, risk, business impact, response options, and next steps.
• Escalate high-severity or high-impact incidents according to process and exercise sound judgment when available data is incomplete.
• Create and improve investigation notes, client-facing incident communications, detection logic, procedures, and knowledge-base content.
• Remain current on threat actor behavior, vulnerabilities, exploits, defensive techniques, and relevant changes in the threat landscape.
• Participate in a rotating on-call schedule of two weeks on call followed by four weeks off. Employees receive an additional 10% compensation during scheduled on-call periods.
• Serve as a voice of authority during the SOC Manager’s absence.

Senior Cyber Threat Analyst

• Lead detection and response for incidents affecting: Manufacturing systems (OT/ICS), Connected medical/surgical devices, Enterprise IT environments
• Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact
• Investigate and respond to incidents involving: Intellectual property theft, Disruptions and/or ransomware affecting production lines, IT vulnerabilities
• Partner with IT, production, and engineering to embed secure-by-design principles across the IT & product lifecycle
• Conduct threat modeling and security risk assessments for surgical and medical devices
• Support compliance with: IT security guidance, SOX, ISO27001, EU GDPR / NIS2
• Identify and remediate product vulnerabilities (secure firmware, APIs, connectivity)
• Secure manufacturing environments (plants, production lines, robotics, control systems)
• Lead vulnerability and patch management for industrial control systems
• Reduce risk to production continuity and product integrity
• Monitor threat landscape with emphasis on: Nation-state attacks targeting IP, Supply chain compromise, Medical device exploitation
• Implement Zero Trust principles across corporate IT and manufacturing environments
• Ensure alignment with: SOX, ISO 27001, NIST CSF / NIST 800-53, Global data protection regulations (GDPR where applicable)

Lead Information Security Analyst

• Oversees technical design, implementation, maintenance, and responsibilities for information security disciplines
• Coordinates enterprise-wide risk assessment and IT compliance documentation
• Manages information security awareness and training efforts
• Provides guidance on information security policies and requirements
• Manages compliance assessments and security configuration audits

Senior IT Governance, Risk, and Compliance Analyst – Research Cybersecurity

• Analyzing real-time cyber threat intelligence to stay ahead of emerging threats.
• Correlating security events to identify and prioritize potential incidents.
• Conducting in-depth network traffic analysis using raw packet data to uncover malicious activity.
• Collaborating with incident response teams to contain and eradicate threats.
• Investigate alerts generated from endpoints, IDS/IPS, NetFlow data, and custom sensors to detect compromises on customer networks.
• Analyze extensive log files, pivot between diverse datasets, and correlate evidence to support incident investigations, creating detailed technical reports outlining your findings.
• Triage security alerts to rapidly identify malicious actors targeting customer networks.
• Monitor and analyze DoD and open-source intelligence feeds to identify Indicators of Compromise (IOCs) and integrate them into security sensors and SIEMs.
• Report security incidents to customers and USCYBERCOM, ensuring timely communication and coordinated response.

• Create and write analytic intelligence reports regarding acquired public datasets
• Help evaluate new tools and datasets for integration into proprietary workflows or technology
• Craft finished analytical products incorporating text and graphics to convey complex concepts to senior executives and other decision-makers
• Identify, infiltrate, and monitor online communities of interest that are selling public data
• Develop new data-driven methodologies and efficiencies to enable core Pandion workflows
• Lead or support complex digital investigations
• Demonstrate adaptability and flexibility in real-time to meet shifting client or organizational demands

Senior Intelligence Analyst

• Continuously monitor competitor, product, underwriting, pricing, distribution, technology, and market signals to identify meaningful shifts, risks, and opportunities.
• Translate raw intelligence into concise executive-ready outputs using the Insight → Implication → Action framework.
• Build and maintain the core CI toolkit over time, beginning with a market watch summary, competitor moves log, source library, and focused competitor profiles, then expanding into scorecards, battlecards, dashboards, and quarterly executive reviews as the function matures.
• Prioritize CI work based on decision impact, repeatability, and feasibility, ensuring the function produces fewer, sharper outputs rather than broad reporting that cannot be sustained.
• Conduct ad hoc deep dives on competitor moves, new entrants, partner opportunities, pricing changes, underwriting shifts, and distribution dynamics.
• Analyze where the company is winning or losing in the market and help identify the underlying drivers behind performance gaps.
• Partner with Product, Underwriting, Distribution, Marketing, Sales, and other cross-functional teams to validate findings and convert insights into action.
• Support quarterly executive competitive reviews, monthly market summaries, and rapid-response briefs for time-sensitive competitive developments.
• Build and maintain the SharePoint-based CI intelligence hub, including competitor profiles, source library, market watch archive, decision briefs, and competitor moves log.
• Use AI-enabled tools and workflow automation to accelerate signal gathering, summarize recurring sources, classify competitive moves, and improve consistency of outputs while maintaining human judgment and source validation.

Competitive Intelligence Analyst

• Responsible for supporting 24x7 operations within the Unified Support Security Operations Center (SOC) and Observability functions
• Continuous monitoring of security events and system health across IFS customer environments
• Analyzing alerts from both security and observability platforms
• Identifying potential threats or service anomalies
• Ensuring timely incident triage and response
• Responsible for monitoring the IFS customer security state
• Analyze real-time events and triage incidents based on the severity of the situation
• Assist in identifying and addressing information security gaps, with a focus on cloud environments
• Stay up to date on the latest cybersecurity threats and vulnerabilities and support the implementation of recommended mitigations
• Proactively monitor alerts for all cloud hosted IFS products
• Communicate with other resolver groups to rectify them
• Contribute to the operation (Observability) coverage of 24x7x365
• Identify and categorize prioritized incoming events or alerts for IFS products via Observability stack
• Generate regular reports on the organization’s security posture and incident trends
• Contribute to the creation and maintenance of operational documentation and knowledge base articles
• Any other duties as designated by the line manager

FedRamp Information Security Analyst

• Monitor & Investigate: Actively monitor security dashboards, queues, and alerts from various sources (automated tools, escalated tickets) to detect potential threats.
• Incident Triage & Response: Conduct initial investigations into security alerts, perform rapid response actions like securing user accounts, and collect necessary log data for analysis.
• Escalate Effectively: Analyze findings to determine the scope and severity of incidents, resolving straightforward issues and escalating complex cases to Level 2 Analysts with clear, concise information.
• Security Tool Management: Review and implement authorized, routine changes to security tools, such as processing client exemption requests in the EDR or temporarily adjusting settings for testing.
• Collaborate with the Security Team: Work closely with fellow analysts and security engineers, sharing information, participating in team discussions, and contributing to a collaborative security environment.
• Engage with Users/Clients: Communicate professionally and clearly with end-users or clients to gather details about potential security issues, explain security procedures, and provide guidance during incident resolution.
• Liaise Across Departments: Interact effectively with other teams (e.g., Reactive Support, Client Strategy, NOC) to coordinate security responses and share necessary information.
• Document Actions: Maintain accurate and detailed records of investigations, actions taken, communications, and resolutions within ConnectWise.
• Provide Support: Offer timely and helpful support related to security inquiries, upholding a professional and customer-service-oriented approach in all interactions.

Security Analyst I

• This role is responsible for building and strengthening relationships across the Bank with technical leads and business partners, to understand technology stacks, designs, and review processes in support of the Bank’s cyber risk management practices.
• The role will assist management in the development, implementation, and execution of a measurements-based cyber risk management program.
• The primary responsibility will be to review and assess new and existing vendor engagements and collaborate with technical leads and business partners to ensure comprehensive vendor portfolio management.

Security Analyst jobs in United States

See all jobs on JobTailor

Senior Information Security Analyst – Wargame Facilitator

Security Analyst II, NW Arkansas

Security GRC Analyst

Public Sector Threat Hunter

Third Party Risk Analyst, Security GRC

Principal Cybersecurity – Vulnerability Analyst

Senior Third Party Cybersecurity GRC Analyst

Security Analyst

Fraud Risk & Intelligence Analyst

Senior Analyst, Cyber Security

Cybersecurity Analyst

Senior Cyber Threat Analyst

Lead Information Security Analyst

Senior IT Governance, Risk, and Compliance Analyst – Research Cybersecurity

Cybersecurity Analyst

Senior Intelligence Analyst

Competitive Intelligence Analyst

FedRamp Information Security Analyst

Security Analyst I

Cybersecurity Risk Analyst II