it security analyst

Audubon Companies

<div><p><b>JOB DESCRIPTION</b><b>:
</b></p><p>The IT Security Analyst II is responsible for monitoring, analyzing, and remediating security threats across the organization's IT environment. This role supports day-to-day security operations while also taking ownership of recurring security processes, incident investigation, control administration, compliance documentation, and security improvement initiatives. The analyst will work closely with IT, the Security Operations Center (SOC), business stakeholders, and external partners to strengthen email security, endpoint protection, identity and access management, cloud productivity platform security, security awareness, and audit readiness.</p>
<p>
</p><p><b>PRIMARY RESPONSIBILITIES</b><b>:
</b></p><ul><li>Monitor, triage, and investigate reported phishing attempts, suspicious emails, account activity, endpoint events, and other user-reported or system-generated security incidents; coordinate containment, remediation, and escalation as required.</li>
<li>Review and analyze alerts from SOC services, SIEM platforms, endpoint protection tools, identity systems, Microsoft 365 security controls, and threat intelligence sources; identify trends, false positives, recurring risks, and opportunities for improved detection.</li>
<li>Tune and maintain email security controls, including spam, phishing, impersonation, and malware filtering; recommend and implement rule changes to reduce risk while minimizing business disruption.</li>
<li>Administer phishing simulation campaigns, security awareness training, user follow-up, and reporting; partner with IT and business leaders to improve user resilience against social engineering threats.</li>
<li>Administer and support endpoint protection, internet security, zero-trust desktop controls, and related security platforms; assist with configuration reviews, exception handling, policy updates, and troubleshooting.</li>
<li>Monitor Microsoft 365 user account security, email activity, conditional access signals, risky sign-ins, and related security posture indicators; support remediation of compromised or high-risk accounts.</li>
<li>Support vulnerability management and security hygiene activities by reviewing findings, coordinating remediation with IT teams, validating corrective actions, and documenting risk exceptions where appropriate.
</li><li>Maintain ISMS records, evidence repositories, control documentation, incident records, and audit support materials for ISO 27001 and other compliance or customer-driven security requirements.
</li><li>Participate in incident response activities, risk assessments, tabletop exercises, process improvement initiatives, and security projects; contribute practical recommendations that reduce operational risk and improve security maturity.
</li><li>Prepare recurring metrics, status updates, and management-level summaries related to security incidents, user awareness, control effectiveness, compliance activities, and open remediation items.
</li><li>Provide security guidance to IT staff and non-technical users, balancing risk reduction with business continuity and practical user support.</li>
</ul>
<p></p><p><b>Health, Safety, and Environmental Responsibilities:</b></p>
<ul>
<li>All employees are responsible for supporting Audubon Companies' Health, Safety, and Environmental (HSE) policies and procedures. This includes:</li>
<li>Performing duties in a manner that protects personal and team health and safety</li>
<li>Participating in required HSE training, meetings, and reporting activities</li>
<li>Identifying and reporting hazards, near misses, and unsafe conditions</li>
<li>Following safe work practices and complying with applicable regulatory requirements</li>
</ul>
<p></p><p><b>EXPERIENCE AND SKILL REQUIREMENTS</b><b>:</b></p>
<ul>
<li>Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field, or equivalent combination of education, training, and experience.</li>
<li>Three to five years of experience in IT security, cybersecurity operations, infrastructure security, identity administration, incident response, or a closely related IT role.</li>
<li>Hands-on experience with security tools and platforms such as SIEM, endpoint detection and response, endpoint protection, email security, identity and access management, vulnerability management, and Microsoft 365 security administration.</li>
<li>Working knowledge of phishing analysis, incident triage, endpoint investigation, identity-related threats, cloud productivity platform security, and common attack techniques.</li>
<li>Experience administering or supporting Okta, Microsoft 365, endpoint protection, internet security, and zero-trust or conditional access controls preferred.</li>
<li>Understanding of ISMS practices, security policies, risk management, audit evidence collection, and compliance frameworks such as ISO 27001.</li>
<li>Ability to analyze security events, document findings clearly, prioritize risk-based remediation activities, and communicate practical recommendations to technical and non-technical audiences.
</li><li>Strong written and verbal communication skills in English; Spanish proficiency is a plus but is not required.
</li><li>Ability to work independently, manage recurring security responsibilities, collaborate across teams, and support occasional after-hours incident response or planned security activities when business needs require.
</li><li>Relevant certifications such as CompTIA Security+, CySA+, SSCP, GSEC, CISSP, CISM, or Microsoft security certifications are preferred.</li>
</ul>
<p></p><p><b>No Recruiters, please!</b></p>
<p>
Equal Opportunity Employer/Veterans/Disabled</p></div>

IT Security Analyst II

University of Tennessee

<div><p>This position supports the University of Tennessee Institute of Agriculture IT Security Program by protecting institutional data, IT assets, networks, and users in Knoxville and across the state. Reporting to the Chief Information Security Officer, the IT Security Analyst focuses on governance, risk, and compliance activities; PCI merchant compliance; incident response; vulnerability mitigation; and user security awareness training. The role requires strong written and verbal communication skills and the ability to analyze and resolve complex information security issues independently and collaboratively.</p></div>
<br><div><ul><li><p><b>Governance, Risk, and Compliance (25%) </b>- Participate in UT&rsquo;s Governance, Risk, and Compliance team activities; conduct vendor and internal risk assessments using system tools; and determine approval or denial of IT purchase requests based on risk and compliance requirements.
</p></li><li><p><b>Credit Card Merchant Compliance (30%) </b>- Ensure compliance for approximately 110 UTIA credit card merchants and about 500 merchant staff by reviewing PCI DSS self-assessments, procedures, inventories, and annual training completion.
</p></li><li><p><b>IT Security Incident Response (25%) </b>- Coordinate with UTIA, UTCVM, UTK, and UT System partners on security operations alerts and incident response; investigate security breaches; perform malware forensics; and monitor vulnerability remediation timelines.
</p></li><li><p><b>IT Security Awareness Training (20%) </b>- Administer annual and new-hire security awareness training for approximately 2,800 employees, track non-completion, coordinate account actions, maintain tickets, and review phishing simulation results to determine additional training needs.</p></li></ul></div>
<br><div><p><b>Required Qualifications
</b></p><ul><li><p>Education: Bachelor&rsquo;s Degree in Cybersecurity, Information Technology, Computer Science, or related field
</p></li><li><p>Experience: Minimum of three years of hands-on experience in IT governance, risk, compliance, or malware forensics
</p></li><li><p>Knowledge, Skills, Abilities:
</p><ul><li><div>Knowledge of compliance standards, such as PCI DSS, HIPAA, FERPA, GDPR, and risk frameworks, such as CIS, NIST SP 800-171, CUI, ISO 27001, FISMA, ITAR
</div></li><li><div>Strong communication skills, particularly when relaying technical information to non-technical users
</div></li><li><div>Strong troubleshooting and problem-solving abilities to identify threats and vulnerabilities, as well as determine the proper risk mitigation
</div></li><li><div>Must be able to work independently as well as in teams.
</div></li></ul></li><li>Applicants must be legally authorized to work in the United States on a full-time basis without need now or in the future for sponsorship for employment-based visa status.
</li></ul><p><b>Preferred Qualifications
</b></p><ul><li><p>Experience:
</p><ul><li><div>Experience working in Higher Education or other large public sector organization
</div></li><li><div>Professional certification(s) such as CISSP, SANS GSEC, CompTIA Security+
</div></li></ul></li><li><p>Knowledge, Skills, Abilities:
</p><ul><li><div>Knowledge of Manage Engine&rsquo;s Endpoint Central, Microsoft Intune, Microsoft Entra, Microsoft Azure, Microsoft Defender, Tenable, UpGuard, or FTK<br>
</div></li></ul></li></ul><p></p><p><b>Work Location
</b></p><ul><li><p>Location: Knoxville, TN
</p></li><li><div>Hybrid &ndash; this position is eligible for up to two days per week remote work after six-month probationary period.<br>
</div></li></ul><p></p><p><b>Compensation and Benefits UT market range:
</b></p><ul><li><p>Anticipated hiring range <b>: </b>$73,000 &ndash; 85,000</p></li><p></p><li><p><br>
</p></li></ul><p></p><p><b>Application Instructions
</b></p><p>To express interest, please submit an application with the noted below attachments.<br>
</p><p></p><ul><li><p>Resume
</p></li><li><p>Cover Letter<br>
</p></li></ul><p></p><p><b>About The College/Department/Division
</b></p><p>University of Tennessee Institute of Agriculture Information Technology Services supports teaching, research, extension, and administrative operations across Knoxville and locations throughout the state. The team works to provide secure, reliable, and responsive technology services that protect institutional data, support compliance obligations, and enable the Institute&rsquo;s mission.</p></div>
<br><div><div>The University of Tennessee, Knoxville, has shaped leaders, changemakers, and innovative thinkers since its founding in 1794. The university is home to more than 38,000 students and 10,000 statewide employees&mdash;the Volunteers&mdash;who uphold the university&rsquo;s tradition of lighting the way for others through leadership and service.<br>
</div><div></div><br>
<div>UT Knoxville offers over 900 programs of study across 14 degree-granting colleges and schools. As Tennessee&rsquo;s flagship land-grant university, its footprint spans the entire state. The university holds the highest Carnegie classification for research activity and has deep partnerships with industry leaders and the US Department of Energy&rsquo;s largest multidisciplinary laboratory, Oak Ridge National Laboratory.<br>
</div><div></div><br>
<div>The Knoxville campus serves and recruits for UT Knoxville, including the Institute of Agriculture and the Space Institute, as well as the UT Institute of Public Service.<br>
</div><div></div><br>
<div>UT Knoxville considers its employees its number one asset. With values that focus on work-life balance, compensation, and innovation leadership, all Vols are supported to advance professionally. Employees have access to career development and coaching, continued education, and an extensive list of development and training possibilities. The Volunteer employee experience implements structures and practices to attract and retain top-tier talent, fostering a strong staff community and supporting a culture of involvement and engagement for everyone.<br>
</div><div></div><br>
<div>The university holds a strong commitment to its land-grant mission of learning and engagement, with a tradition of service and leadership that carries that Volunteer spirit throughout the state and around the world. It has been ranked nationally as &ldquo;Best Employer for New Graduates,&rdquo; &ldquo;One of America&rsquo;s Best Large Employers,&rdquo; and &ldquo;Best Workplace for Women,&rdquo; and has been designated as &ldquo;Best Place for Working Parents&rdquo; by Forbes Magazine.<br>
</div><div></div><br>
<div>Apply today and join the Tennessee Volunteer community!</div></div>

IT Security Analyst - UTIA Information Technology Services

Covenant Health

<div>Overview:<div></div><div><b><br>
Cybersecurity Analyst Associate</b></div><div><b>
Full Time, 80 Hours Per Pay Period, Day Shift</b></div><div></div><div><b><br>
Covenant Health Overview:</b></div><div>
Covenant Health is the region&rsquo;s top-performing healthcare network with 10 hospitals, outpatient and specialty services, and Covenant Medical Group, our area&rsquo;s fastest-growing physician practice division. Headquartered in Knoxville, Covenant Health is a community-owned integrated healthcare delivery system and the area&rsquo;s largest employer. Our more than 11,000 employees, volunteers, and 1,500 affiliated physicians are dedicated to improving the quality of life for the more than two million patients and families we serve every year. Covenant Health is the only healthcare system in East Tennessee to be named a Forbes &ldquo;Best Employer&rdquo; seven times.</div><div></div><div><b><br>
Position Summary:</b></div><div>
Under close supervision, the Cybersecurity Analyst Associate is responsible for assisting in the protection of Covenant Health&rsquo;s information systems and data assets from cyber threats. This role involves monitoring security incidents, supporting the management of cybersecurity tools and platforms, and ensuring compliance with healthcare regulations such as HIPAA and HITECH, while adhering to frameworks such as NIST and HITRUST. The analyst will work closely with IT infrastructure, application teams, and clinical departments to implement security best practices and maintain a secure environment across the enterprise.</div>
Responsibilities:
<ul><li>Monitor security alerts and incidents using SIEM and EDR platforms.</li><li>
Assist in conducting vulnerability assessments and coordinating remediation efforts with system and network teams.</li><li>
Help develop and maintain security policies, procedures, and standards aligned with NIST and CIS frameworks.</li><li>
Support investigations of security breaches and coordinate incident response activities.</li><li>
Perform regular audits of access controls, user permissions, and privileged accounts.</li><li>
Collaborate with infrastructure and application teams to ensure secure system configurations and patch management.</li><li>
Support compliance initiatives including HIPAA, HITECH, PCI-DSS, and other regulatory requirements.</li><li>
Assist in conducting risk assessments and recommending mitigation strategies for new technologies and projects.</li><li>
Provide cybersecurity awareness training and guidance to staff across the organization.</li><li>
Participate in interdisciplinary IT projects to ensure security is embedded throughout the system lifecycle.</li><li>
Maintain current knowledge of emerging threats, vulnerabilities, and cybersecurity technologies.</li><li>
Document and report on security metrics, incidents, and risk posture to IT leadership.</li><li>
Assist with the implementation of continuous security monitoring and threat intelligence analysis.</li><li>
Support forensic investigations and digital evidence collection.</li><li>
Collaborate with legal and compliance teams during audits and regulatory reviews.</li><li>
Follows policies, procedures, and safety standards. Completes required education assignments annually. Works toward achieving goals and objectives, and participates in quality improvement initiatives as requested.</li><li>
Performs other duties as assigned.</li></ul>
Qualifications:
<div><b>
Minimum Education:</b>
</div><div>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent work experience and certifications (e.g. Security+, CvSA+, GSEC) will be considered.</div><div></div><div><b><br>
Minimum Experience:</b>
</div><div>Two (3) years of experience in IT, with at least one (1) year focused on cybersecurity in a large, complex environment.</div><div></div><div><b><br>
Licensure Requirement:</b>
</div><div>None</div></div>

CYBERSECURITY ANLST ASSOC

4P Consulting Inc.

<div><div>Vulnerability Assessment Analyst IV &ndash; Container Security &amp; Exposure Management
<p><b>Location: </b>Birmingham, AL or Atlanta, GA
<br>
<b>Client: </b>Southern Company Services
<br>
<b>Contract Duration: </b>15 Months
<br>
<b>Work Schedule: </b>Hybrid &ndash; 4 days onsite
<br>
<b>Experience: </b>10+ Years
</p><h2 class="jobSectionHeader"><b>Job Summary
</b></h2><p>We are seeking an experienced <b>Vulnerability Assessment Analyst IV </b>to support container security and exposure management within a cybersecurity organization. This role will focus on identifying, validating, and assessing security vulnerabilities across IT/OT systems, cloud-native platforms, Kubernetes, OpenShift, Docker, container images, clusters, pipelines, and supporting infrastructure.
</p><p>The ideal candidate will have strong hands-on experience with vulnerability assessment, container security, DevSecOps, exposure management, attack path analysis, scripting, and risk reporting.
</p><h2 class="jobSectionHeader"><b>Key Responsibilities
</b></h2><ul><li>Identify and assess security vulnerabilities across IT and OT systems.
</li><li>Perform vulnerability scans and analyze exposures in web applications, networks, systems, embedded devices, firmware, and containerized environments.
</li><li>Evaluate container security risks across Kubernetes, OpenShift, Docker, AKS, EKS, GKE, and similar platforms.
</li><li>Assess container images, base images, dependencies, Kubernetes manifests, Helm charts, runtimes, RBAC, network policies, secrets handling, and cluster configurations.
</li><li>Validate exposure paths and determine real-world exploit potential.
</li><li>Conduct attack path mapping and prioritize high-risk vulnerabilities.
</li><li>Support exposure management operations, including data review, reporting, trend analysis, remediation tracking, and escalation.
</li><li>Partner with platform, infrastructure, application, DevOps, and security teams to recommend practical mitigation strategies.
</li><li>Monitor emerging threats, zero-days, CVEs, and exploitation methods.
</li><li>Translate technical findings into clear business risk summaries for stakeholders and leadership.
</li></ul><h2 class="jobSectionHeader"><b>Required Qualifications
</b></h2><ul><li>10+ years of experience in cybersecurity, vulnerability assessment, exposure management, DevSecOps, infrastructure security, or related roles.
</li><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent experience.
</li><li>Strong experience with Kubernetes, OpenShift, Docker, AKS, EKS, GKE, or similar container platforms.
</li><li>Ability to assess vulnerabilities in container images, dependencies, manifests, Helm charts, runtimes, and cluster configurations.
</li><li>Knowledge of container security controls such as image scanning, least privilege, non-root containers, secrets handling, RBAC, pod security standards, network policies, and runtime monitoring.
</li><li>Experience with vulnerability management, attack surface management, cloud security posture management, and exposure management.
</li><li>Proficiency with scripting languages such as Python, PowerShell, or Bash.
</li><li>Familiarity with OWASP methodologies and common application/system vulnerabilities.
</li><li>Experience with SIEM platforms for detection validation and log analysis.
</li><li>Strong analytical, troubleshooting, communication, and documentation skills.
</li><li>Must pass NERC CIP and Insider Threat Protection background checks.
</li></ul><h2 class="jobSectionHeader"><b>Preferred Qualifications
</b></h2><ul><li>Experience in DevSecOps, application security, offensive security, penetration testing, adversarial threat simulation, or container platform engineering.
</li><li>Certifications such as CKS, CKAD, CKA, OSCP, CEH, GSEC, CISSP, or CISA.
</li><li>Experience supporting IT and OT security environments.
</li><li>Experience working with cloud-native enterprise systems and CI/CD pipelines.
</li></ul><h2 class="jobSectionHeader"><b>Key Skills
</b></h2><p>Vulnerability Assessment, Container Security, Exposure Management, Kubernetes, OpenShift, Docker, DevSecOps, IT/OT Security, Cloud Security, Attack Path Mapping, Vulnerability Management, SIEM, OWASP, RBAC, Image Scanning, Runtime Monitoring, Python, PowerShell, Bash, CI/CD Security, Risk Reporting.</p></div></div>

Vulnerability Assessment Analyst IV 4P/715

NuHarbor Security

<div><h2 class="jobSectionHeader"><b>The Company</b></h2>
<p>
Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We're growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.</p>
<h2 class="jobSectionHeader"><b>
The Role</b></h2>
<p>
The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes.</p>
<p>
.</p>
<p><i>
What you'll do</i></p>
<ul>
<li>Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.</li>
<li>Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative.</li>
<li>Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged.</li>
<li>Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes.</li>
<li>Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements.</li>
<li>Identify and communicate security gaps and mitigations in the context of client environments.</li>
<li>Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility.</li>
<li>Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions.</li>
<li>Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary</li>
<li>Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments.</li>
<li>Support the onboarding of new clients onto NuHarbor Security Services and Platforms.</li>
<li>Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication.</li>
<li>Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality.</li>
<li>Develop and refine automation playbooks to reduce alert volume and improve analyst workflow.</li>
<li>Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership.</li>
<li>Develop recommendations and enhancements to mature a client's cybersecurity program.</li>
<li>Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities.</li>
</ul>
<p><i>Your foundation. The requirements for this role:</i></p>
<ul>
<li>Bachelor's Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
<ul><li>In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.</li>
</ul></li><li>Demonstrated experience with SOC operations, executing security event triaging and tuning.</li>
<li>Demonstrated experience writing runbooks and support procedures.</li>
<li>Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment.</li>
<li>Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.</li>
<li>Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions.
<ul><li>CrowdStrike</li>
<li>Microsoft Defender</li>
<li>Microsoft Sentinel</li>
<li>Splunk Enterprise Security</li>
</ul></li><li>Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Previous experience in technical support or security-focused role.</li>
<li>Willing and able to work Sunday - Thursday, 8:30am - 5:00pm.</li>
<li>Must be authorized to work within the United States.</li>
</ul>
<p><i>Additional capabilities that will differentiate you for this role:</i></p>
<ul>
<li>Bachelor's Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment.</li>
<li>Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.)</li>
<li>Demonstrated experience communicating and presenting to executive level client stakeholders.</li>
<li>Technical writing and reporting experience.</li>
<li>Experience executing initial triaging and response through a SOAR platform.</li>
<li>Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems.</li>
<li>Experience with memory and storage forensics.</li>
<li>Experience with static and dynamic malware analysis.</li>
<li>Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences.</li>
<li>Experience with data science techniques (clustering, anomaly detection, data normalization, etc.</li>
<li>General systems administrator experience.</li>
<li>Fluency with the MITRE ATT&amp;CK framework as an active investigation and communication tool.</li>
<li>Experience working in multiple cybersecurity disciplines (i.e. Penetration Testing, Threat, Information Assurance, Engineering, etc.)</li>
</ul><h2 class="jobSectionHeader"><b>The Rewards</b></h2>
<p><i>
What you can expect:</i></p>
<ul>
<li>The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.</li>
<li>An organization that recognizes and rewards employee commitment and contribution to our customers' satisfaction and success</li>
<li>Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.</li>
<li>A collaborative and driven working environment in a rapidly growing company and market</li>
<li>A fun and social working environment where you are encouraged to be your true self.</li>
</ul>
<p>You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.</p>
<p>
The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer.</p>
<p>
We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you'd like to be a part of, we'd like to hear from you.</p>
<p><b>
AAP/EEO Statement</b></p>
<p>
The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled.</p>
<p>
NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.</p></div>

Senior Security Operations Analyst

Arrowhead Pharmaceuticals

<div><div><p>Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead's RNAi-based therapeutics leverage this natural pathway of gene silencing.</p>
<p>
Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates.</p>
<p>
Arrowhead's corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI &amp; San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need.</p></div><p><b>
The Position</b></p>
<p>
The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization's Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection. This role operates at the intersection of information security, data governance, and regulatory compliance, ensuring that sensitive data - including intellectual property, clinical trial data, and personally identifiable information - is properly classified, protected, and governed in accordance with applicable regulations and internal policies. In addition to Purview-focused responsibilities, this analyst contributes to broader information security operations including troubleshooting endpoints, working in Microsoft 365, and Intune.</p>
<p><i>
Responsibilities</i></p>
<ul>
<li>The analyst will serve as the hands-on operational owner of Microsoft Purview, managing the platform on a daily basis across its core functional areas:</li>
<li>Information Protection &amp; Data Classification - Administer and maintain Microsoft Purview sensitivity labels, label policies, and auto-labeling configurations. Develop and refine classification taxonomies appropriate to pharmaceutical data types, including research data, regulatory submissions, and patient data. Review and tune auto-classification rules to minimize false positives and ensure accurate labeling across Microsoft 365 and connected data sources.</li>
<li>Data Loss Prevention - Build, maintain, and continuously tune DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoints. Investigate DLP policy matches and alerts, differentiate true policy violations from false positives, and work with business stakeholders to refine rules without disrupting legitimate business workflows. Document DLP incidents and escalate confirmed violations per the incident response process.</li>
<li>eDiscovery &amp; Content Search - Support legal hold requests and eDiscovery collections. Work with Legal and HR to scope, execute, and export content searches accurately and in accordance with chain-of-custody requirements.</li>
<li>Insider Risk Management - Administer Purview Insider Risk Management policies, review alerts, and coordinate with HR, Legal, and Security leadership on confirmed or suspected insider risk cases. Maintain strict confidentiality in handling all insider risk data.</li>
<li>Audit &amp; Reporting - Generate and interpret Purview audit logs, compliance reports, and dashboard analytics. Provide regular reporting to management on DLP incidents, label adoption rates, policy effectiveness, and compliance posture. Identify trends and recommend adjustments to policies and configurations.</li>
<li>Platform Administration &amp; Health Monitoring - Monitor the health and performance of the Purview platform, apply configuration changes and updates in alignment with change management processes, and stay current on Microsoft feature releases relevant to Purview. Manage connector integrations with third-party data sources as required.</li>
<li>Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.</li>
<li>Triage security alerts and escalate as necessary.</li>
</ul>
<p><b>Requirements</b></p>
<ul>
<li>Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience</li>
<li>3+ years of experience in Information Security, IT compliance, or data governance role</li>
<li>Demonstrated hands-on experience administering Microsoft Purview or its predecessor Microsoft 365 Compliance Center, including at least two of the following areas: sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management</li>
<li>Experience working within or supporting a regulated industry environment</li>
<li>Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise</li>
<li>Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders</li>
</ul>
<p><b>Preferred</b></p>
<ul>
<li>Microsoft certifications relevant to security and compliance, such as SC-401</li>
<li>Experience with Microsoft Defender for Cloud Apps (MCAS) and its integration with Purview</li>
<li>Prior experience in the pharmaceutical, biotech, or life sciences sector</li>
<li>Experience supporting eDiscovery or legal hold workflows in collaboration with Legal teams</li>
<li>Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems</li>
<li>Comfortable working across functional teams including Legal, Compliance, HR, and IT, and possesses the judgment to handle sensitive data and insider risk information with appropriate discretion.</li>
</ul><div><p>
Arrowhead provides competitive salaries and an excellent benefit package.
</p><p>Candidates must have current, valid authorization to work in the country where this role is located.</p><br>
<p>
California Applicant Privacy Policy</p></div></div>

Information Security Analyst II

Uline

<div><div><p><b>IT</b> <b>Security Administrator</b>
</p><p><b>Corporate Headquarters</b>
</p><p><b>12575 Uline Drive, Pleasant Prairie, WI 53158</b>
</p></div><p></p><div><p>Safeguard systems for a growing North American enterprise! As a Uline IT Security Administrator, you&rsquo;ll manage security controls, strengthen resilience and protect our business from ever-changing threats.</p>
<p></p><p><b>Careers Packed with Potential. </b>Backed by 45+ years of success, Uline offers opportunities to grow your career with stability you can count on.</p>
<p></p><p><b>Position Responsibilities</b>
</p><ul><li><p>Administer and maintain IT security applications and systems, ensuring reliability, scalability, and alignment with organizational security objectives.</p>
</li><li><p>Collaborate with IT and other business teams to design and implement robust security procedures that strengthen our security posture while supporting seamless business operations.</p>
</li><li><p>Contribute to our threat operations program, including personnel support, policy enforcement and cybersecurity awareness initiatives.</p>
</li><li><p>Communicate technical security concepts effectively to business users, developers, architects and managers.</p>
</li></ul><p></p><p><b>Minimum Requirements</b>
</p><ul><li><p>Bachelor's degree in computer science, information technology or related field.</p>
</li><li><p>5+ years of IT security operations experience.</p>
</li><li><p>Proven experience with enterprise-level applications and security practices.</p>
</li><li><p>Professional certifications such as Security+, CISSP, or equivalent is <b>highly desirable.</b>
</p></li><li><p>Uline does not participate in the H1-B lottery.</p>
</li></ul><p></p><p><b>Benefits</b>
</p><ul><li><p>Complete health insurance coverage and 401(k) with 6% employer match that starts day one!
</p></li><li><p>Multiple bonus programs.</p>
</li><li><p>Paid holidays and generous paid time off.</p>
</li><li><p>Tuition Assistance Program that covers professional continuing education.</p>
</li></ul><p></p><p><b>Employee Perks</b>
</p><ul><li><p>On-site caf&eacute; and first-class fitness center with complimentary personal trainers.</p>
</li><li><p>Over four miles of beautifully maintained walking trails.</p>
</li></ul><p></p><p><b>About Uline</b>
</p><p></p><p>Uline, a family-owned company, is North America&rsquo;s leading distributor of shipping, industrial, and packaging materials with over 9,800 employees across 14 locations.</p>
<p></p><p>Uline is a drug-free workplace. All new hires must complete a pre-employment hair follicle drug screening. All positions are on-site.</p>
<p></p><p>EEO/AA Employer/Vet/Disabled</p>
<p></p><p>#LI-KK2</p>
<p>#CORP</p>
<p>(#IN-PPITL1)</p>
<p>#ZR-HQIT</p>
</div><p></p><p>Our employees make the difference and we are committed to offering exceptional benefits and perks! Explore https://www.uline.jobs/#working-here_blankUline.jobs to learn more!</p></div>

IT Security Administrator

Search 7968+ It security analyst jobs near you this June. New roles added regularly across leading industries. Apply today.