Information Security Analyst

W2 only, no C2C, must be authorized to work in the US (both now and in the future).

Information Security Analyst (Direct Hire) - in Cottage Grove, Wisconsin. Apply now for this opportunity at Carex!

Direct Hire role (does not allow for sponsorship)

Location: Madison, WI

Carex is partnering with a financial services industry partner to find an experienced and proactive Information Security Consultant. This role is ideal for a cybersecurity professional who thrives on managing threats, leading security initiatives, and driving improvement across technical environments. You’ll play a key role in protecting critical infrastructure while contributing to a collaborative, mission-driven culture.

What You’ll Do

• Act as an internal consultant, advising stakeholders across the organization on information security best practices
• Participate in and lead technical projects related to vulnerability management, incident response, and threat detection
• Serve as an escalation point for Information Security technicians and support advanced triage of alerts and security incidents
• Review indicators of compromise (IOCs), suspicious communications, and manage an industry-leading XDR solution
• Support vendor management efforts as a subject matter expert and assist in third-party risk oversight
• Provide evidence and support for internal and third-party audits, exams, and compliance reviews
• Drive automation-first approaches to address recurring security operations issues
• Design, manage, and continuously improve processes related to core security tools and infrastructure
• Collaborate across IT and business units to align security practices with organizational goals
• Maintain detailed documentation, contribute to policy updates, and assist with regulatory adherence (e.g., BSA, OFAC, USA Patriot Act)
• Stay current on emerging threats, technologies, and industry trends
• Build professional networks internally and externally to enhance knowledge and share best practices.
  
  
  

What You’ll Bring

• 2 years of professional experience in information security, incident response, forensics, or analytics
• Associate degree in information systems, cybersecurity, or related field preferred
• Industry certifications such as CompTIA Security , GIAC/SANS, or ISC2 SSCP preferred
• Solid understanding of networking protocols, routing, DHCP, TCP/IP, and unified communications
• Familiarity with vulnerabilities, risk frameworks, and threat mitigation strategies
• Experience with Linux and/or Windows internals and security controls
• Exposure to tools such as Elastic, Splunk, Logic Monitor, or other SIEM and monitoring platforms
• Working knowledge of Active Directory, enterprise patching, anti-virus, IDS/IPS, DLP, NAC, and other network security systems
• Excellent written and verbal communication skills, with the ability to explain technical concepts to varied audiences
• Proven ability to manage multiple priorities, collaborate cross-functionally, and write effective policies and documentation.
  
  
  

Carex Consulting Group is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity, or Veteran status.