Information Security Analyst I

Job Summary

The Information Security Analyst is responsible for protecting Midco’s data and systems by monitoring vulnerabilities, assessing risks, and strengthening internal security controls. The role identifies potential threats, evaluates security impacts of system changes, and implements measures that reduce the likelihood of breaches or service interruptions. They support business continuity by keeping security practices current and providing timely reporting that informs decision-making.

Responsibilities

• Inventory, document, and evaluate the security status of network attached devices and identify opportunities to improve internal network segmentation.
• Conduct vulnerability scans and monitor company security reporting and alert systems.
• Participate in the evaluation of system and application changes to ensure company security policies and practices are followed.
• Assist with planning and implementing security measures to protect computer systems, networks and data.
• Proactively assesses potential items of risk and seek opportunities for mitigating threats.
• Stay up-to-date on the latest intelligence, including hackers’ methodologies, in order to anticipate security breaches.
• Support the prevention of data loss and service interruptions by researching new security practices and technologies.
• Provide weekly, monthly and annual reports as necessary.
• Attend meetings to learn about business practices, and internal processes and procedures.
• Be willing to work on special projects as assigned.
• Communicate effectively and professionally in all forms of communication with internal and external customers.
• Adhere to Midco’s privacy guidelines to ensure each customer’s privacy.
• Maintain regular attendance.
• Model Midco's mission, vision, values, ethos, and Leadership Success Drivers, and inspire others to do the same.
• Ensure customer privacy by adhering to Midco's privacy guidelines while actively following Midco policies and procedures.
• Maintain reliable and predictable attendance as required by the position.
• Perform other duties as assigned.
  
  

Note: Management reserves the right to assign or reassign functions and responsibilities to this job description at any time.

Required Qualifications

• Associate’s degree or equivalent experience in cyber security, IT, computer science, technology or related field.
• Knowledge and familiarity with network, computer, and application security best practices.
  
  

Preferred Qualifications

• Technical knowledge or experience with: UNIX/Linux, MS Windows, Active Directory, Digital.
• Proficient in Microsoft Outlook and Word required and experience with Excel and PowerPoint.
• Certificates, SSL, VPN, IPSec, TCP/IP, DNS, web security architectures, Nessus.
  
  

Work Environment

• May occasionally be required to reach with hands and arms, stoop, kneel, or crouch.
• Heavy keyboard/mouse usage required with repetitive movements.  
• Must remain at your desk or workstation for long periods of time.  
• The noise level in the work environment is moderate.
• May be required to work in excess of 40 hours per week and other than normal business hours, such as holidays, evenings and weekends as business demands.
  
  

Physical Demands

• Primarily involves sitting for extended periods while working on a computer, attending meetings, or reviewing reports.
• Frequent use of hands and fingers for typing, writing, and operating standard office equipment (keyboard, mouse, phone, etc.).
• Ability to read detailed information on screens, dashboards, and printed materials; may require prolonged screen time.
  
  

Mental Demands

• Ability to concentrate on detailed data analysis and security monitoring for extended periods.
• Requires critical thinking and problem-solving skills to identify and mitigate security threats.
• Must remain calm and make informed decisions under pressure during security incidents or breaches.