Information Security Analyst

· Implement and maintain secure configurations across networks, servers, workstations, endpoints, IoT devices, and other technology assets to ensure compliance with corporate security standards.

· Monitor, investigate, and report on security incidents, breaches, vulnerabilities, and unusual network or system behavior.

• Own the vulnerability management lifecycle: identify and validate vulnerabilities, classify severity and business impact, distribute actionable findings to system owners, and confirm remediation through re-testing and closure tracking.

· Manage user access and permissions using role-based access control (RBAC), enforce the principle of least privilege, and recommend proactive mitigation measures to minimize risk.

· Develop proposals, recommendations, and security documentation; create reports and alerts for executives and teams.

· Monitor public, private, and classified sources for emerging threats; respond to escalated security issues.

· Support and contribute to the organization’s overall security posture and perform other duties as assigned.

• Monitor emerging security technologies and trends, evaluate their potential value, and contribute to the adoption of automation and process improvements to reduce recurring manual tasks and strengthen overall security posture.