Security Analyst

JOB REQUIREMENTS: THE DAY TO DAY... Triage and classify vulnerabilities identified across vulnerability management, attack surface, and threat intelligence feeds Coordinate remediation with system owners and verify closure Run vendor-provided assessment and evaluation tools to identify vulnerabilities, misconfigurations, and control gaps. Perform initial analysis of the results and route findings for remediation Execute the monthly patch cycle for servers and workstations, investigate and resolve patch failures, and report on patch compliance Perform first-line triage of security alerts escalated by the managed detection and response provider. Investigate and resolve routine incidents, and escalate confirmed or high-severity incidents to senior staff Administer and maintain security software, including endpoint protection, email security, identity protection, and logging and monitoring tools Apply configuration changes and tune detections under established standards Run the security awareness program, including training assignment and completion tracking, phishing and social engineering simulations, and reporting of results Perform email quarantine review and release, and investigate reported phishing and social engineering attempts Conduct periodic user access reviews, verify offboarding and access revocation, and maintain the security exception and risk acceptance log Gather information and produce control evidence across systems in support of audits, cyber insurance applications, customer security questionnaires, and other business requests Apply and help enforce enterprise security policies, standards, procedures, and baselines, and recommend updates based on operational experience Maintain current knowledge of information security practices, tools, frameworks, and attack and threat trends, and recommend practical improvements Create and maintain security incident reports, runbooks, and operational documentation Provide rotating on-call support and contribute to root cause analysis Other duties as assigned ***** OTHER EXPERIENCE AND QUALIFICATIONS: THE QUALIFICATIONS... Degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Information Systems, Computer or Network Engineering, Information Technology, or a closely related technical field is preferred Minimum of 3 years of hands-on experience in information technology, with at least 2 years in a security operations capacity Experience in vulnerability management, patch management, or security alert triage and incident handling System and application administration experience in a Microsoft environment, including Active Directory and Entra ID, Microsoft 365, Microsoft Defender, and Intune Working knowledge of a scripting language for automation and reporting; PowerShell or Python preferred Working knowledge of a recognized security control framework such as the NIST Cybersecurity Framework or the CIS Critical Security Controls Demonstrated organization, documentation, and written communication skills, including the ability to explain security requirements to non-technical staff Experience in a manufacturing environment, including exposure to operational technology (OT) and non-IT-managed assets preferred Ability to work independently on recurring responsibilities and to recognize when to escalate ***** APPLICATION INSTRUCTIONS: Apply Online: https://talentwire.org/XAADvH