Security Analyst / Security Operations Support

 Location: Boston, MA

Work Arrangement: Onsite, Monday–Friday
Engagement: 3-Month Interim Assignment
Position:

Position Overview

The Interim Security Analyst will provide hands-on security operations and technical support for a three-month period to maintain the organization’s daily security posture and operational continuity.

This role is intended to provide operational coverage while the Security Officer position is vacant and the primary Security Analyst is on medical leave. The successful candidate will be responsible for day-to-day security monitoring, alert and ticket triage, endpoint and network security operations, compliance workflows, incident coordination, and vulnerability management.

This is a hands-on operational role focused on maintaining existing security processes, technologies, and controls.

Out of Scope: Long-term security policy development, strategic security roadmaps, enterprise governance frameworks, and major security program initiatives. These activities will be deferred to the incoming Security Officer.

Key Responsibilities

1. Security Operations, Monitoring & Ticket Management

• Administer 1Password, including provisioning, modifying, revoking, and managing enterprise user accounts and vault access.
• Monitor and triage the security service desk queue, prioritizing security-related requests and escalations.
• Investigate and respond to employee-reported phishing attempts, suspicious emails, potential security threats, and general security inquiries.
• Monitor and respond to CrowdStrike EDR alerts and escalations.
• Maintain endpoint security hygiene, including monitoring EDR agent health, coverage, and connectivity.
• Monitor SIEM platforms, including Sumo Logic and/or Splunk, for anomalous activity, suspicious events, indicators of compromise, and other security-relevant activity.
• Investigate security alerts and determine appropriate escalation or remediation actions.
• Monitor security-tool integrations and identify failures or gaps in security telemetry.
• Monitor network and web-security telemetry through tools such as Cisco Umbrella and ORDR.
• Maintain accurate documentation and ticket records for security events, investigations, and remediation activities.

2. Compliance, Governance & Data Protection Operations

• Monitor and execute established workflows for GDPR data subject access requests (DSARs) and data erasure requests.
• Coordinate with appropriate internal stakeholders to ensure requests are processed within established requirements and timelines.
• Implement and maintain Google Workspace legal holds as directed.
• Administer and enforce existing domain-wide Data Loss Prevention (DLP) controls within Google Workspace.
• Escalate compliance, privacy, or legal matters that fall outside established procedures to the appropriate stakeholders.

3. Incident Response & Security Event Coordination

• Serve as a central technical coordination point during security incidents and security-response escalations.
• Assist with initial investigation, containment, documentation, and escalation of security incidents.
• Maintain clear incident timelines, technical notes, evidence, and action items.
• Coordinate with IT, infrastructure, application, and other technical teams during incident response activities.
• Escalate significant or high-risk security events to appropriate leadership and stakeholders.
• Support post-incident remediation activities within the scope of existing procedures and assigned responsibilities.

4. Vulnerability & Asset Management

• Execute routine vulnerability and security scans across applicable hosts, endpoints, and network assets.
• Review scan results and identify vulnerabilities requiring remediation.
• Validate findings, prioritize issues based on severity and operational impact, and coordinate remediation with responsible technical teams.
• Track remediation activities and follow up on outstanding vulnerabilities.
• Assist with asset discovery and security hygiene activities using available security and network-monitoring tools.

Required Technical Experience

The ideal candidate should have hands-on experience with:

• Security operations and security monitoring
• SIEM platforms such as Sumo Logic and/or Splunk
• Endpoint Detection & Response (EDR), preferably CrowdStrike
• Identity and password-management platforms, preferably 1Password
• Google Workspace security administration
• Google Workspace DLP and legal holds
• Phishing and email-security investigation
• Network/DNS security monitoring, preferably Cisco Umbrella
• Asset discovery and network behavior monitoring, preferably ORDR
• Vulnerability scanning and remediation tracking
• Incident response and security-event triage
• GDPR/privacy operational workflows

Core Competencies

• Strong security-alert investigation and analytical skills
• Ability to prioritize and manage a high-volume security ticket queue
• Strong troubleshooting and problem-solving capabilities
• Ability to recognize indicators of compromise and suspicious activity
• Strong documentation and incident-management discipline
• Ability to work independently in a fast-paced operational environment
• Strong communication and escalation skills
• Ability to collaborate effectively with IT, infrastructure, legal, compliance, and business stakeholders
• Strong attention to detail and commitment to maintaining security controls

Expected Deliverables During the 3-Month Engagement

The Interim Security Analyst is expected to:

• Maintain daily security monitoring and operational coverage.
• Keep security tickets and alerts appropriately triaged and documented.
• Maintain endpoint and security-tool health.
• Ensure critical security alerts are investigated and escalated appropriately.
• Execute established GDPR, legal hold, and DLP workflows.
• Support timely incident response and technical coordination.
• Conduct routine vulnerability and asset scans and track remediation.
• Maintain operational continuity until the Security Officer and primary Security Analyst functions are restored.

Success Criteria

Success in this role will be measured by the candidate’s ability to maintain a consistent security operational posture throughout the interim period, including:

• Timely response to security alerts, tickets, and escalations.
• Continuous monitoring of critical security platforms and integrations.
• Effective identification and escalation of potential security incidents.
• Maintenance of endpoint, identity, and security-tool hygiene.
• Timely execution of compliance and data-protection workflows.
• Accurate documentation of security events, investigations, and remediation.
• Minimal disruption to ongoing security operations during the transition period.

Scope Boundary

This position is operational and execution-focused. The Interim Security Analyst will maintain and execute existing security processes and controls but will not be expected to develop long-term security strategy, author comprehensive security policies, establish new governance frameworks, or develop strategic security roadmaps. Such responsibilities will transition to the incoming Security Officer.

AXA Professionals is a premier recruitment agency specializing in connecting highly skilled IT technicians and healthcare professionals with top-tier organizations. Our mission is to deliver exceptional staffing services that address the critical needs of technology and healthcare sectors, ensuring operational efficiency and excellence in patient care.
About Us: Founded in 2001 on the principles of communication, customer service, integrity, and innovation, AXA Professionals bridges the gap between talented IT experts and dedicated healthcare workers with leading companies and healthcare facilities. Our dual focus allows us to cater to the evolving needs of both technology and healthcare sectors, delivering tailored staffing solutions that drive success and growth.
Our Services:
· IT Technician Staffing: We provide comprehensive staffing solutions for IT roles, including network administrators, systems analysts, cybersecurity experts, and technical support specialists. Our recruitment process ensures that only the most qualified candidates are matched with clients’ specific IT needs.
· Healthcare Professional Recruitment: From nurses and doctors to allied health professionals and administrative support, we source, screen, and place top talent across a wide range of healthcare disciplines. Our goal is to enhance patient care and streamline healthcare operations.
· Customized Staffing Solutions: We understand that each client has unique needs. Whether you require temporary, permanent, or contract staffing, we offer flexible solutions that adapt to your organization’s requirements and timelines.