Information Security Analyst

Our client, a 3rd party health benefits administrator, is seeking a hands-on Information Security Analyst to help protect the organization's systems, data, and technology infrastructure across cloud and on-premises environments. This role focuses on security monitoring, threat detection, incident response, vulnerability management, and continuous improvement of security controls. The ideal candidate is a well-rounded cybersecurity professional with experience across multiple security disciplines, strong analytical skills, and the ability to collaborate with IT and business teams in a regulated environment.

Key Responsibilities

Security Operations & Incident Response

• Monitor security platforms, investigate alerts, identify threats, and coordinate incident response and remediation.
• Analyze endpoint, network, identity, application, and cloud logs to detect suspicious activity.
• Maintain incident response procedures, investigation documentation, and escalation processes.

Cloud, Identity & Data Security

• Support security controls across cloud, hybrid, and on-premises environments.
• Manage identity and access security, including MFA, privileged access, conditional access, and access reviews.
• Implement and maintain data protection controls, including data loss prevention (DLP), classification, encryption, and secure information sharing.
• Support security awareness training, phishing simulations, and insider-risk prevention.

Vulnerability & Infrastructure Security

• Monitor and maintain endpoint, network, application, and infrastructure security controls.
• Identify vulnerabilities, prioritize risks, coordinate patching, and validate remediation.
• Review system configurations and infrastructure changes to ensure security best practices.
• Support backup security, disaster recovery, and business continuity initiatives.

Governance, Risk & Continuous Improvement

• Maintain security policies, procedures, documentation, and compliance controls.
• Support security automation, reporting, and process improvements.
• Assist with AI security governance, risk assessments, and controls for generative AI and automated systems.
• Collaborate with IT teams and business stakeholders to strengthen the organization's overall security posture.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 3–5 years of hands-on experience in information security, security operations, cloud security, or infrastructure security.
• Experience investigating security alerts, responding to incidents, and managing vulnerabilities.
• Working knowledge of endpoint protection, identity and access management, network security, cloud security, and data protection.
• Experience with patch management, security monitoring, risk assessment, and remediation tracking.
• Strong troubleshooting, analytical, communication, and documentation skills.
• Ability to manage competing priorities and communicate security risks to technical and non-technical audiences.

Preferred Qualifications

• Experience supporting security operations in a regulated industry.
• Familiarity with NIST, MITRE ATT&CK, SOC 2, HITRUST, or similar security frameworks.
• Experience with SIEM, EDR/XDR, cloud security tools, DLP, and identity governance platforms.
• Knowledge of Microsoft 365, cloud infrastructure, hybrid environments, and SaaS security.
• Scripting or automation experience using PowerShell, security query languages, or similar tools.
• Relevant cybersecurity certifications.

Salary Disclaimer

The salary range for this role reflects the minimum and maximum compensation for the role. Offers are typically made between the range minimum and the range midpoint. Actual compensation will be determined based on job-related skills, experience, and expertise, as evaluated during the interview process. Compensation may also vary based on where a role is performed.

Equal Opportunity Statement

ProSearch is an Equal Opportunity Employer and considers all qualified applicants for employment without regard to legally protected characteristics. All employment decisions are based on business needs, job requirements, and individual qualifications.