What are the responsibilities and job description for the Information Security Specialist position at Confidential?
Information Security Analyst
In-Office | Jacksonville, Florida
Help Secure and Strengthen a Growing Technology Environment
We are seeking an experienced Information Security Analyst to join our technology team and play a critical role in protecting enterprise systems, applications, and data. This position offers the opportunity to work across multiple areas of cybersecurity, including threat detection, vulnerability management, incident response, security architecture, compliance, and user awareness.
The ideal candidate combines strong technical expertise with a proactive approach to identifying risk and implementing practical security solutions.
What You'll Do
- Monitor, investigate, and respond to security events and potential threats across the organization.
- Conduct vulnerability assessments and coordinate remediation efforts with technical teams.
- Support incident response activities, including analysis, containment, recovery, and documentation.
- Evaluate, implement, and maintain security tools and technologies.
- Partner with infrastructure, development, and business teams to integrate security best practices into projects and operations.
- Assist with security audits, regulatory requirements, and compliance initiatives.
- Review security controls, access management processes, and system configurations to reduce organizational risk.
- Maintain and enhance security policies, standards, and procedures.
- Research emerging threats, vulnerabilities, and industry trends to strengthen the organization's security posture.
- Deliver guidance and security awareness education to employees and stakeholders.
Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; equivalent professional experience may be considered.
- Minimum 3 years of cybersecurity or information security experience.
- 5 years of experience in information technology, systems administration, network administration, or a related technical discipline.
- Experience working with security monitoring, vulnerability management, and incident response processes.
Preferred Experience
- Security Information and Event Management (SIEM) platforms such as Splunk.
- Vulnerability management solutions including Qualys, Tenable, or Rapid7.
- IDS/IPS technologies and network security monitoring.
- Endpoint security and endpoint detection/response solutions.
- Web application firewalls and web security technologies.
- Penetration testing methodologies and security assessment tools.
- Enterprise networking concepts, including TCP/IP, routing, switching, and firewall administration.
- Cloud and hybrid infrastructure security experience is a plus.
Preferred Certifications
- Security , CySA , PenTest , CASP , or other CompTIA security certifications.
- Certified Ethical Hacker (CEH).
- GIAC certifications.
- CISSP, CISM, or similar advanced security credentials.
What Makes You Successful
- Strong analytical and investigative mindset.
- Ability to communicate technical concepts to both technical and non-technical audiences.
- Excellent organizational skills and attention to detail.
- Ability to manage multiple priorities in a fast-paced environment.
- Strong documentation and process improvement capabilities.
- Collaborative approach and commitment to continuous learning.
What We Offer
- Competitive compensation and benefits package.
- Medical, dental, vision, and life insurance coverage.
- 401(k) with company match.
- Generous paid time off.
- Professional development and certification support.
- Stable organization with opportunities for growth and career advancement.
Equal Opportunity Employer