Information Security Analyst

Position Details:
Job Title: Information Security Analyst
Location: Montgomery, AL (On-site only)
Job Type: till 9/30/25, due to fiscal year.... There will be an extension to the next fiscal year.
Work Mode: 100% onsite
Interview Mode: 1-2 rounds, if local onsite interview is preferred
Position Overview: The Information Security Analyst will join AMA's Information Security Office (ISO) Security Operations team and report to the Security Operation's Director. The selected candidate be responsible for technical security controls that safeguard the confidentiality, integrity, and availability of AMA information assets from unauthorized access, loss, alteration, or damage.

This role performs the following duties in the ISO's Security Operations Center (SOC):
Analyzes identified anomalies from extended detection and response (XDR) and Security Information and Event Management (SIEM) systems for severity and potential impact as part of incident response procedures.
Implements, maintains, and documents security safeguards designed to preserve the integrity, confidentiality, and availability of AMA's information systems.
Reviews and assesses current infrastructure changes to ensure appropriate levels of protection.
Performs network and penetration tests as well as application vulnerability scans.
Promotes activities to foster information security awareness throughout the AMA.
Monitors internal control systems to ensure that appropriate information access levels are maintained.
Supports various projects for AMA's systems development life cycle. Other duties as assigned.

Skills Required
Intermediate professional level role with a technical focus:
Well defined analytical skills to conduct effective security analysis so that key issues are properly identified, and effective solutions are provided.
Uses analytics to identify endpoint anomalies for incident response actions.
Competent to explore the specific techniques used by malware to exploit technical vulnerabilities in IT systems/devices and networks, as well as the social engineering techniques to trick IT users into infecting their systems.
Strong advanced interpersonal skills to adapt personal communication styles to the style of others.
Advanced time management skills to prioritize workload.
Able to prioritize and take prompt appropriate actions toward remediation of security events while also seeking and accepting advice from fellow teammates and or subject matter experts where necessary.

Experience Required
Experience Four (4) years of experience in any two areas:
Local/wide area network design or support.
Information security administration.
Systems Administration.

Education Required
High School diploma and associate degree in information technology, or CompTIA Security+ Certification

Additional Information

• In-person interviews are preferred, but virtual interviews can be conducted for non-local candidates.
• Candidate will work onsite in Montgomery, AL.
• No remote work is currently being considered.