information technology security analyst

CoVantage Credit Union

<div>
 Job Details
 
 
 
 Description
 
 
 
 As an Information Security Analyst 1, you&rsquo;ll play an important role in protecting member and employee information, supporting business and technology teams, and contributing to a strong culture of security across the organization. If you&rsquo;re detail‑oriented, curious about cybersecurity, and motivated to make a meaningful impact, this role is an excellent foundation for a security career at CoVantage.
 
 
 
 As a CoVantage team member, you&rsquo;ll receive a 401k employer match of up to 200%, a bonus of annual salary up to 4%, a generous employer HSA contribution, and paid time off for community service.
 
 
 
 
 Job Duties
 
 
 
 <ul>
 <li>
 Assists with monitoring systems, networks, and security tools to help protect credit union information and ensure adherence to security policies
 </li>
 <li>
 Supports vulnerability management, security reporting, and remediation efforts under the direction of the Information Security Officer
 </li>
 <li>
 Assists with the administration of information security tools, policies, and standards
 </li>
 <li>
 Responds to security‑related Help Desk requests and provides support to internal users as needed
 </li>
 <li>
 Participates in testing and maintenance of information security controls and business continuity plans
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Associate&rsquo;s or Bachelor&rsquo;s degree in cybersecurity, computer science, networking, or a related field, or six months of professional experience in information security or network administration
 </li>
 <li>
 Basic knowledge of information technology, networking concepts, and information security principles
 </li>
 <li>
 Security+ or other cybersecurity‑related certification preferred; A+ certification or willingness to obtain within 12 months of hire
 </li>
 <li>
 Strong written and verbal communication skills with the ability to work professionally across teams
 </li>
 <li>
 Ability to organize and prioritize work, work independently, and maintain accuracy under pressure
 </li>
 <li>
 Must be bondable
 
 
 </li>
 </ul>
 
 Depending on the qualifications and experience of applicants, CoVantage may elect to modify this position and/or job title without reposting the opportunity.
 
</div>

Information Security Analyst

Big 5 Sporting Goods

About Big 5 Sporting Goods Big 5 Sporting Goods is a leading retailer of name-brand sporting goods and accessories, with hundreds of stores in 11 states across the Western U.S. We&rsquo;re passionate about delivering value and performance to our customers, and we&rsquo;re looking for an Information Security Analyst to join our team. Role Overview The Information Security Analyst is responsible for supporting and executing the organization&rsquo;s security operations in partnership with a managed detection and response (MDR) provider. This role is cross-functional and focuses on incident investigation, response coordination, security control effectiveness, and continuous improvement of the security posture across on‑premises, hybrid, and cloud environments. The analyst acts as a key operational contributor and subject‑matter expert, translating MDR intelligence into timely, well-documented inputs that support security leadership in risk‑based decision‑making and long‑term risk reduction. The position is located at our Big 5 office in Tustin, California. Key Responsibilities Review, validate, and prioritize MDR‑reported incidents based on business context and risk Manage incident response activities from confirmation through remediation and closure under direction of security leadership Coordinate containment and recovery actions with IT, infrastructure, and business stakeholders Ensure incident documentation, timelines, and evidence meet operational, legal, and audit standards Leverage MDR‑provided detections, investigations, and threat intelligence to guide internal response Collaborate with the MDR partner on alert tuning, detection improvements, and coverage gaps Support configuration, operation, and improvement of security controls across endpoint, network, identity, email, and cloud environments Assist in evaluating, implementing, and integrating new security technologies and controls Collaborate with infrastructure and development teams to embed security into system architecture and deployment workflows Participate in system hardening, baseline configuration, and patch management initiatives Support secure configuration, monitoring, and access control for cloud and SaaS environments Assist with the secure onboarding of new services and infrastructure changes Contribute to the development and maintenance of security automations and runbooks Support security awareness initiatives, including phishing simulations and employee training What We&rsquo;re Looking For 2&ndash;4 years of hands‑on experience in information security or security operations Strong understanding of incident response, vulnerability management, and security operations workflows Experience supporting on‑premises, hybrid, and cloud environments Solid understanding of operating systems, directory services, cloud services, and networking fundamentals Familiarity with common attack techniques and adversary frameworks (MITRE ATT&amp;CK, exposure to MITRE ATLAS a plus) Scripting or automation experience to improve investigation efficiency and operational maturity Relevant security certifications or equivalent practical experience Strong sense of ownership and accountability for security outcomes Demonstrated ability to work independently and drive assignments to completion with minimal supervision Perks &amp; Benefits Competitive compensation and benefits (health insurance, savings and retirement plan, vacation, generous corporate discount at all stores) Hybrid role with 3 days onsite and 2 days remote Salary The annual base salary range for this position is from $85,000-$100,000. The range provided includes the base salary that we expect to pay for the role. Offered base salary will be dependent on factors including the scope and complexity of the role, candidate&rsquo;s related work experience, and subject matter expertise. California Consumer Privacy Act Notice at Collection

DCM Services

<div>Description:

About DCM Services
DCM Services is a leading provider of financial services solutions, specializing in account resolution and customer engagement. With decades of industry experience, DCM partners with top financial institutions to deliver compliant, people-first services. The company is committed to building a secure, well-governed information environment grounded in ISO 27001/2 standards &mdash; and this role sits at the heart of that mission.
The Information Security Analyst assists in developing, implementing, and certifying an Information Security Management System (InfoSec Program) based on ISO27001/2 standards. You'll own documentation, access management, audits, phishing tests, vendor compliance, and more &mdash; working cross-functionally to keep the company's security posture strong.
Requirements: 
Key responsibilities<ul><li>
Manage and review events, access levels, and scorecard metrics; respond to auditor questionnaires about the company's security posture</li><li>
Maintain the InfoSec program document lifecycle so documentation reflects current controls and risk mitigations</li><li>
Manage access tickets for new hires, changes, and revocations; keep the Profile Definition Matrix current</li><li>
Conduct monthly phishing tests, summarize results, and recommend risk-reduction actions</li><li>
Coordinate and document annual Business Continuity Plan table-top exercises for Operations Support and Accounting</li><li>
Participate in client audits end-to-end and drive remediation of IT and information security findings</li><li>
Audit Support-level vendors for compliance with the company's Vendor Management Program</li><li>
Participate in weekly email DLP quarantine monitoring rotation and partner with IT on firewall reviews</li><li>
Review weekly physical access swipes to secure areas and ensure ticket-based owner approval</li></ul> 
Qualifications<ul><li>
Associate's degree in a related field, or 4+ years of experience in IT, QA, Compliance, or Accounting</li><li>
Demonstrated strong technical writing ability</li><li>
Basic awareness of ISO/IEC 27001, PCI DSS, NIST SP800-53, SOC 1, and SOC 2 frameworks</li><li>
Familiarity with HIPAA/HITECH, GLBA, and CCPA regulatory requirements</li><li>
Awareness of security architecture principles, change management, disaster recovery, and business continuity concepts</li><li>
Ability to manage multiple priorities, work independently, and communicate effectively in a cross-functional environment</li></ul>
Certifications not required, but interest in pursuing CISSP, CISA, CISM, CRISC, or CompTIA credentials is a plus. 
Physical &amp; travel requirements<ul><li>
Prolonged periods of computer work</li><li>
Up to 5% travel outside local area, including occasional overnight</li><li>
Ability to travel to the office upon request or for business needs</li><li>
Ability to lift up to 15 lbs occasionally</li></ul>
 #DCMHP1</div>

Standard Textile

<div>At Standard Textile, we&rsquo;re dedicated to providing comfort and care across generations. Guided by our values, we focus on solutions that serve our customers, support our associates, and strengthen our communities. Since 1940, we&rsquo;ve remained committed to creating better textiles&mdash;delivered seamlessly by experts who care.
The IT Security Analyst is responsible for defending our manufacturing environment against cyber threats. Core duties include monitoring and triaging security alerts across endpoint, network, identity, and cloud telemetry; investigating and responding to incidents; hardening systems and infrastructure; managing vulnerabilities; and supporting security tooling such as XDR, EDR, email security, and firewalls.
This role reports to and works directly with our IT Security Lead, who will mentor the IT Security Analyst on our tooling, playbooks, and environment. You will work firsthand with AI agents and automation built into our security operations. The ideal candidate has a foundation in security operations, strong fundamentals, and an interest in growing into broader IT cybersecurity work.
Key Responsibilities:<ul><li>
Monitor XDR, EDR, and other security tooling to detect, triage, and investigate suspicious activity across endpoints, network, identity, and cloud environments.</li><li>
Use AI agents and automated workflows to accelerate alert triage, enrichment, and initial investigation.</li><li>
Assist in incident response activities (containment, eradication, recovery, and post-incident review) and maintain the playbooks and runbooks that support them.</li><li>
Participate in threat hunting using known TTPs and threat intelligence and help tune detection logic to reduce false positives.</li><li>
Run the vulnerability management lifecycle (scanning, prioritization, coordination of remediation, and verification).</li><li>
Support identity and access controls (privileged access, conditional access, account reviews).</li><li>
Assist with hardening endpoints, servers, Active Directory, and cloud workloads against common attack techniques (e.g., MITRE ATT&amp;CK).</li></ul>
Collaboration and Communication<ul><li>
Partner with IT infrastructure, application, and operations teams to embed security into systems, projects, and day-to-day operations.</li><li>
Partner with Security Lead to identify high-leverage automation opportunities and help build, evaluate, and tune agentic workflows for the SOC.</li><li>
Communicate security risks, incidents, and mitigation strategies clearly to technical teams, senior management, and, when needed, external partners or incident response retainers.</li></ul>
Qualifications Include:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information System Analytics, Computer Science, or a closely related discipline.</li><li>
1&ndash;3 years of experience in a SOC, IT security, or closely related IT role (internships and co-ops count). Firsthand exposure to incident response, networking, or system administration.</li><li>
Solid fundamentals in cybersecurity, common attacker tradecraft (e.g., MITRE ATT&amp;CK), networking, and Windows/Linux/Active Directory administration. Firsthand exposure to a SIEM, XDR, or EDR platform is a plus.</li><li>
Relevant certifications such as CompTIA Security+, CySA+, Network+, Microsoft SC-200, Cisco CyberOps Associate, Blue Team Level 1 (BTL1), or GIAC GSEC/GCIH are preferred.</li></ul>
Proudly, Standard Textile has earned a title of US Best Managed Company for the fifth year running, an honor awarded by Deloitte Private and The Wall Street Journal, celebrating the exceptional achievements of American private companies and their management teams.
Standard Textile is an Equal Opportunity Employer, including Veterans and Individuals with Disabilities.
Join us!</div>

IT Security Analyst

New York University

Position Summary: The Information Security Analyst Tier 1 serves as the essential first line of defense in our Security Operations Center (SOC). This role goes beyond simple monitoring; you will be responsible for the end-to-end triage, investigation, and detailed documentation of security incidents. Your daily workflow involves analyzing security alerts from various data sources&mdash;specifically leveraging SIEM, EDR platforms, and email security gateways&mdash;to identify and mitigate threats ranging from phishing to sophisticated compromised account investigations. A critical component of this role is proactive defense and operational excellence. You will actively contribute to the SOC&rsquo;s evolution by developing and refining detection logic based on observed activity, automating manual tasks to increase operational efficiency and maintaining comprehensive security playbooks and incident reports. You will also handle user access requests to security tools, ensuring secure and appropriate identity management. As well as ensuring all investigative steps are logged for compliance and hand-off purposes. This position offers a dynamic environment for those who want to transition from traditional monitoring into Detection Engineering and Security Orchestration (SOAR). This role operates during standard business hours with no on-call rotation. Qualifications: Required Education: 
Bachelor's Degree or equivalent combination of education and experience 
 
Preferred Education: 
Bachelor's Degree Bachelor&rsquo;s Degree or higher in Cybersecurity, Computer Science, or a related technical discipline 
 
Required Experience: 
2+ years Experience involving information technology and/or information security 
 
Preferred Experience: 
3+ years Experience in an enterprise Security Operations Center or IT environment. Experience investigating compromised accounts, including analyzing authentication logs, sessions, and MFA events. Experience building or tuning detections within a SIEM (Splunk preferred) or EDR tool. Basic to Intermediate experience with Automation: Using Python, PowerShell, or SOAR tools to streamline repetitive tasks. Experience with Email Security Gateways and performing deep-dive phishing analysis (header analysis, attachment detonation, etc.). Experience managing User Access Requests and Identity and Access Management (IAM) principles. Experience writing hand-off notes, incident reports, and SOPs. Experience working with Cloud technologies. 
 
Required Skills, Knowledge and Abilities: 
Demonstrated understanding of the incident response lifecycle and common attack vectors. Ability to clearly communicate technical findings and security concepts to non-technical stakeholders. Proficiency with Windows, macOS, and Linux operating systems. Strong analytical mindset with a focus on 'why' an alert triggered, not just 'what' triggered. Ability to maintain a high level of discretion and professionalism. 
 
Preferred Skills, Knowledge and Abilities: 
Knowledge of Detection Engineering principles (e.g., mapping to MITRE ATT&amp;CK). Familiarity with API-based integrations for security automation. Understanding of network protocols (TCP/IP, DNS, HTTP) and cloud security fundamentals. Understanding of HTTP/HTTPS protocols and response codes (e.g. 2xx,3xx,4xx,5xx). Familiarity with security frameworks (NIST, CIS) and risk/compliance initiatives. 
Additional Information: In compliance with NYC's Pay Transparency Act, the annual base salary range for this position is USD $70,000.00 to USD $84,700.00. New York University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. This pay range represents base pay only and excludes any additional items such as incentives, bonuses, clinical compensation, or other items.
 
 
NYU aims to be among the greenest urban campuses in the country and carbon neutral by 2040. Learn more at nyu.edu/nyugreen. 
 
NYU is an Equal Opportunity Employer and is committed to a policy of equal treatment and opportunity in every aspect of its recruitment and hiring process without regard to age, alienage, caregiver status, childbirth, citizenship status, color, creed, disability, domestic violence victim status, ethnicity, familial status, gender and/or gender identity or expression, marital status, military status, national origin, parental status, partnership status, predisposing genetic characteristics, pregnancy, race, religion, reproductive health decision making, sex, sexual orientation, unemployment status, veteran status, or any other legally protected basis. All interested persons are encouraged to apply at all levels.

Information Security Analyst Tier 1

Chromalloy

Chromalloy is a global engineering & solutions company. We are a leading provider of aftermarket parts, repairs, and solutions that safely & reliably extend the life of aircraft engines and gas turbines. We develop, manufacture and repair critical turbine components for a range of engine platforms. Our solutions support the engines running the aerospace, energy and defense industries around the world.
 Video: What We Do
 Why work at Chromalloy?
 Chromalloy employees are proud, passionate problem-solvers who strive to live our values every day. A career with Chromalloy is an opportunity to learn from top industry experts, work with important technologies, and unlock a passion for innovation. Join our team of experts, innovators and problem-solvers delivering world-class solutions for our customers. As a global company, we are committed to creating an inclusive environment where all employees feel represented, heard, and able to bring their best selves to work every day. Be part of something bigger with Chromalloy!
 Our Total Rewards Program is designed to support you today and in the future.
 <ul>
<li>Comprehensive and flexible benefit options starting on day one, including medical, dental, vision, EAP, wellness incentives, and 401(k) with employer matching.</li>
<li>Development & progression opportunities for every employee – regular performance conversations, training and development curriculum, and engineering fellowship programs.</li>
<li>Paid time off, including vacation, sick time, paid holidays, and parental leave—all eligible on your first day of employment!</li>
<li>Competitive pay, including eligibility for quarterly and annual bonuses, depending on role and site.</li>
</ul>
Eligibility for individual benefit plans may vary based on employment status.
 
Job Description
 The Global IT Security Analyst is a critical role responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across our global environment. This is an ideal opportunity for someone motivated by hands-on incident response, cross-functional collaboration, and strengthening the security posture of systems, infrastructure, and end-user computing.
 We are looking for an individual with strong technical depth and the judgment to prioritize and drive incidents to resolution, while clearly communicating impact, status, and next steps to both technical teams and business partners. You will help build repeatable response playbooks and partner with end users to improve security awareness and reduce risk.
 
Primary Accountabilities: 
<ul>
<li>Monitor, triage, and investigate security alerts using SIEM and endpoint detection and response (EDR) tooling; validate severity and scope, and document findings.</li>
<li>Execute and continuously improve incident response processes (prepare, detect, contain, eradicate, recover); develop and maintain playbooks and runbooks for common scenarios (phishing, malware, account compromise, ransomware).</li>
<li>Perform incident investigation and analysis using logs and telemetry (identity, endpoint, network, cloud); conduct basic packet and host analysis as needed to determine root cause and attacker activity.</li>
<li>Coordinate incident response with the SOC/MDR provider and internal teams (IT, Infrastructure, HR, Legal, and business stakeholders); ensure timely escalation and handoffs.</li>
<li>Lead containment and remediation actions (e.g., isolate endpoints, disable accounts, block indicators, reset credentials) and track actions through to closure with clear timelines and ownership.</li>
<li>Drive post-incident reviews (lessons learned) and implement corrective actions to reduce recurrence, improve detection logic, and strengthen controls.</li>
<li>Maintain awareness of the current threat landscape and translate threat intelligence into actionable detections, hardening recommendations, and user guidance.</li>
<li>Support governance and assurance activities including policy/standard reviews, control evidence collection, and third-party risk and audit activities (e.g., ISO 27001, NIST, CIS).</li>
<li>Create and tune detection content (queries, correlation rules, and indicators) to improve signal quality and reduce false positives in security monitoring tools.</li>
<li>Perform basic malware triage and forensic collection as needed (e.g., preserve evidence, analyze artifacts, support deeper analysis by internal teams or vendors).</li>
<li>Engage end users during investigations (e.g., phishing reports, suspicious activity) with clear guidance and empathy; contribute to security awareness initiatives (phishing education, safe computing practices) and incorporate user feedback to improve processes.</li>
</ul>
Qualifications
 
Education and Experience: 
<ul>
<li>BS degree in Computer Science, Engineering or Information Technology or equivalent.</li>
<li>3-5 years of experience in a cybersecurity/SOC/IT security operations role with exposure to incident triage, investigation, and coordinated response.</li>
<li>Working knowledge of security frameworks and control concepts (ISO 27001/27002, NIST 800-53/171, CIS Controls) and how they translate into operational controls.</li>
<li>Experience with common security tooling is preferred (SIEM, EDR, vulnerability scanning, email security, identity platforms; SOAR a plus). Certifications such as Security+, GCIH, GCIA, CEH, SSCP, or equivalent are preferred.</li>
<li>Strong written and verbal communication skills; able to explain risk and response steps to end users and stakeholders, produce incident documentation, and present post-incident findings.</li>
<li>Must be able to travel as needed, sometimes as much as 30%.</li>
</ul>
The salary range for this position reflects a broad spectrum of experience levels. Individual compensation within the range is determined by multiple factors, including relevant experience, education, certifications, job related skills, internal equity, and market conditions. We evaluate each candidate individually to ensure fair and competitive pay decisions.
 Due to government regulation only US persons (U.S. citizen, U.S. naturalized citizen, U.S. permanent resident, holder of U.S. approved political asylee or refugee status) may be considered for this role.
 Chromalloy participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
 Any offer of employment will also be conditioned upon the successful completion of a background investigation and drug screen in accordance with company policy and applicable federal and state regulations.
 Chromalloy is an equal opportunity employer - vets/disabled.
 In the United States, if you need a reasonable accommodation for the online application process due to a disability, please contact: https://www.chromalloy.com/contact-us/

IT Cybersecurity - IT Security Analyst

PGMTEK Inc.

<div>
 
 This role demands a strategic thinker with comprehensive knowledge of information security practices and a proven track record of executing and maintaining security operations in a fast-paced, regulated environment. The ideal candidate will have 3-8 years of experience.
 
 
 
 
 
 
 Required Qualifications
 
 
 <ul>
 <li>
 
 Experience:
 
 5-10 years of IT security experience ideally within the banking industry.
 </li>
 <li>
 
 Education:
 
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
 </li>
 <li>
 
 Regulatory Knowledge:
 
 Strong understanding of federal and state regulatory requirements affecting the banking sector. FIDC, NIST etc.
 </li>
 <li>
 
 Technical Expertise:
 
 </li>
 <li>
 Proven experience in network security, backup solutions, patch management, and IT risk assessments.
 </li>
 <li>
 Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
 </li>
 </ul>
 
 
 Key Competencies
 
 
 <ul>
 <li>
 Strategic thinking and problem-solving skills.
 </li>
 <li>
 Ability to work independently and lead cross-functional teams.
 </li>
 <li>
 Strong organizational skills and attention to detail.
 </li>
 <li>
 Ability to manage multiple projects and prioritize effectively.
 </li>
 </ul>
 
 
 Languages:
 
 
 <ul>
 <li>
 Fluency in both English and Mandarin is mandatory given global team component.
 </li>
 </ul>
</div>

Search 10000+ Information technology security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 information technology security analyst jobs Near Me

Information Security Analyst

Information Security Analyst

Information Security Analyst

IT Security Analyst

Information Security Analyst Tier 1

IT Cybersecurity - IT Security Analyst

Information Security Analyst