Job Description: IT Security Analyst II

Location-Remote

Job Summary

The IT Security Analyst II is responsible for protecting the organization's information systems, networks, and data by monitoring security events, identifying vulnerabilities, responding to incidents, and implementing security controls. This role works with IT and business teams to ensure compliance with security policies, industry standards, and regulatory requirements while supporting the organization's overall cybersecurity strategy.

Key Responsibilities

• Monitor security alerts, logs, and events using security monitoring tools.
• Investigate and respond to security incidents, threats, and vulnerabilities.
• Perform vulnerability assessments and support remediation activities.
• Assist in implementing and maintaining security controls, policies, and procedures.
• Conduct security risk assessments and recommend mitigation strategies.
• Manage user access controls and identity management processes.
• Support endpoint, network, cloud, and application security initiatives.
• Participate in security audits, compliance assessments, and regulatory reviews.
• Maintain security documentation, incident reports, and technical procedures.
• Collaborate with IT teams to improve security posture and resolve security issues.
• Stay current with emerging cybersecurity threats, technologies, and best practices.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Knowledge of network security, operating systems, and security principles.
• Experience with security monitoring, vulnerability management, and incident response.
• Familiarity with firewalls, endpoint protection, SIEM, IDS/IPS, and identity and access management (IAM).
• Understanding of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good communication and collaboration abilities.

Preferred Qualifications

• Professional certifications such as CompTIA Security+, CySA+, CEH, GSEC, SSCP, or CISSP (or progress toward certification).
• Experience securing cloud environments (AWS, Azure, or Google Cloud).
• Knowledge of scripting languages such as PowerShell or Python.
• Experience with vulnerability scanning and security assessment tools.
• Familiarity with regulatory requirements such as GDPR, HIPAA, PCI DSS, or SOX.