What are the responsibilities and job description for the Security Analyst position at System Soft Technologies?
Job Description
Contract Opportunity: Information Security Analyst (Technical & Compliance Support)
Contract
Location: 100% Onsite (Colorado Springs, CO) - must be local
Clearance: Must be eligible for CJIS clearance upon hire
No C2C
We’re seeking an experienced Information Security Analyst to provide critical continuity during a key transition period. This role blends deep technical security operations expertise with strong writing and analytical skills to support both compliance efforts and real-time security incident response.
About The Role
In this hands-on role, you’ll perform security reviews across products and platforms (including software, hardware, cloud, and AI-based services), contribute to risk and compliance documentation, and help triage and resolve technical security events. You’ll also provide Tier 1 and Tier 2 support for operational tasks such as phishing investigations, malware response, and identity-based alerting.
Key Responsibilities
Familiarity with any of the following tools is a plus:
You’re as comfortable researching a new AI model’s security implications as you are closing a phishing ticket. You write clearly, analyze deeply, and respond quickly — all while keeping compliance, risk, and operational excellence at the core of your work.
#CyberSecurity #InfoSec #SecurityAnalyst #IncidentResponse #GRC #Tier2Support #MicrosoftSecurity #Compliance #CJIS #PaloAlto #SOCJobs
Contract Opportunity: Information Security Analyst (Technical & Compliance Support)
Contract
Location: 100% Onsite (Colorado Springs, CO) - must be local
Clearance: Must be eligible for CJIS clearance upon hire
No C2C
We’re seeking an experienced Information Security Analyst to provide critical continuity during a key transition period. This role blends deep technical security operations expertise with strong writing and analytical skills to support both compliance efforts and real-time security incident response.
About The Role
In this hands-on role, you’ll perform security reviews across products and platforms (including software, hardware, cloud, and AI-based services), contribute to risk and compliance documentation, and help triage and resolve technical security events. You’ll also provide Tier 1 and Tier 2 support for operational tasks such as phishing investigations, malware response, and identity-based alerting.
Key Responsibilities
- Conduct detailed security risk reviews across a range of systems and technologies
- Write and maintain clear, well-structured compliance and risk documentation
- Support incident response activities, including malware alerts and phishing investigations
- Respond to security operations tickets related to AD, MFA, email, and endpoint alerts
- Assist with identity and access management in Active Directory and Microsoft Entra ID
- Monitor and address security compliance gaps aligned with frameworks like NIST, HIPAA, CJIS, and PCI-DSS
- 5 years of direct information security experience
- Deep knowledge of NIST SP 800-53, PCI-DSS, HIPAA, CJIS, and related standards
- Experience in incident response, malware handling, phishing, and Tier 1/2 SOC tasks
- Strong technical writing and analytical skills
- Hands-on experience with Active Directory, MFA, and Microsoft Entra ID
- Proven ability to quickly research and assess unfamiliar technologies for security impact
- Must be eligible for CJIS clearance upon hire
Familiarity with any of the following tools is a plus:
- Palo Alto (Cortex XDR/XSIAM, Panorama, Firewalls)
- Mimecast (Email & Web Security)
- Keeper (Secrets and Password Management)
- Qualys (Vulnerability Management)
- ServiceNow (ITSM/Ticketing)
- Entrust (Certificate Authority)
- SOC experience or familiarity with AI-related security risks and governance
You’re as comfortable researching a new AI model’s security implications as you are closing a phishing ticket. You write clearly, analyze deeply, and respond quickly — all while keeping compliance, risk, and operational excellence at the core of your work.
#CyberSecurity #InfoSec #SecurityAnalyst #IncidentResponse #GRC #Tier2Support #MicrosoftSecurity #Compliance #CJIS #PaloAlto #SOCJobs