IT Information Security Analyst/Engineer

Job Title: IT Information Security Analyst/Engineer

Location: Seattle, WA (Hybrid)
Duration: 5 months, with possibility of extension

Job Summary:

STAFFXPERT LLC is seeking an IT Information Security Analyst/Engineer on behalf of our client in Seattle, WA. The ideal candidate will have hands-on experience in threat hunting, detection, and security operations, along with strong expertise in system administration, vulnerability management, and incident response. This role involves supporting, monitoring, and enhancing the organization's information security posture while ensuring compliance with established policies and industry standards.

Key Responsibilities:

• Monitor, maintain, and optimize security solutions across the enterprise.

• Conduct threat hunting, vulnerability assessments, penetration testing, and security event investigations.

• Deploy, integrate, and configure security tools following best practices and baseline standards.

• Review logs and reports from endpoints, servers, network devices, and SIEM tools to detect, analyze, and remediate threats.

• Participate in security audits, risk assessments, and control analysis activities.

• Provide on-call support for security incident response, including off-hours coverage.

• Stay current with emerging threats, vulnerabilities, and security technologies to proactively enhance defenses.

• Educate staff on security policies, procedures, and best practices.

• Support compliance initiatives and ensure technology assets adhere to information security standards.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience.

• 5+ years of IT experience, with 4+ years in security and systems administration.

• Hands-on experience in threat detection, vulnerability scanning, and incident response.

• Proficiency with security tools including: CrowdStrike, Microsoft Defender, SIEM (AlienVault preferred), EnCase.

• Experience with vulnerability scanning tools such as Tenable.

• Strong system administration skills (Windows/Linux) and cloud security (Microsoft 365).

• Solid understanding of security frameworks (NIST 800 series, ISO 27001/2) and networking protocols (TCP/IP, UDP, IPSEC, HTTP/S).

• Knowledge of firewalls, IDS/IPS, Active Directory, malware analysis, and cryptography.

• Proficiency in MS Office applications (Word, Excel, PowerPoint, SharePoint, Teams).

• Excellent verbal and written communication, problem-solving, and organizational skills.

Certifications (at least one required):

• CISSP (strongly preferred)

• CompTIA Security+

• GIAC Information Security Fundamentals

• Microsoft Certified Systems Administrator: Security

• Associate of (ISC)

• ITIL or Project Management certifications (preferred)

Preferred Qualifications:

• Hands-on experience with threat modeling and advanced detection techniques.

• Experience analyzing complex attacks and implementing mitigation strategies.

• Familiarity with regulatory compliance and risk management frameworks.