Information Security Analyst

The MSRB seeks an Information Security Analyst to help protect our systems, support daily security operations, and strengthen our security controls. Reporting to the Senior Manager of Cybersecurity, you will investigate alerts and phishing reports, troubleshoot security tools, and help employees address security concerns. This role offers hands-on work across threat detection, vulnerability management, incident response, and employee security education.

Key Responsibilities

• Investigate and respond to security alerts, phishing reports, and employee requests.
• Maintain and troubleshoot security tools, including logging, security information and event management (SIEM), and anti-malware platforms.
• Support vulnerability scans, assessments, penetration testing, and remediation.
• Identify security gaps in systems, applications, networks, and devices, and help implement improvements.
• Review and improve security settings for software-as-a-service (SaaS) platforms.
• Support identity and access management, including access reviews and least-privilege controls.
• Assist with incident response and the implementation of new security tools.
• Help manage security awareness training and simulated phishing campaigns.
• Explain security policies, technology risks, and best practices to employees.
• Monitor emerging threats and help strengthen the MSRB’s defenses.

Requirements

• A bachelor’s degree in computer science or a related field, or two years of IT support experience maintaining computer hardware and supporting networks.
• Foundational knowledge of information security or technology principles, frameworks, and concepts.
• Knowledge of malware analysis tools and standard processes.
• Experience supporting Windows 10 and Windows Server 2012/2016.
• Strong problem-solving skills and sound judgment.
• The ability to explain technical topics clearly to employees with varied technical backgrounds.
• The ability to work independently, take initiative, and collaborate across teams.

Preferred Technical Experience

• Remote access and user support, network switching, firewall security, DNS, and SMTP.
• Enterprise security, cloud engineering, application development, or systems and network administration.
• Threat detection, detection engineering, incident response, identity and access management, or endpoint security.

Listed above is targeted salary range for a new hire into this role. Final compensation decisions will be based upon a candidate’s relevant skills and experience.

Direct applicants only. We are not accepting solicitation from recruitment agencies at this time.

BENEFITS

We are proud to offer a comprehensive benefits package that supports our employees’ overall mental and physical health and wellness. We aim to empower our employees with the resources they need to achieve a successful work life integration. For a comprehensive list of our benefits Click Here.