Analyst, Information Security

Total Wine & More•SSC - MD, MD

8d•$86,130 - $116,270•Onsite

About The Position

Total Wine & More is seeking an experienced Information Security Analyst to join our growing Technology team in our Bethesda, MD office. You will focus on information security responsibilities including incident response, vulnerability management, insider threat management, data loss prevention (DLP), and reporting and presenting to senior leadership. You will also provide exposure to other information security disciplines such as risk management, third party risk management, policy development, and security engineering. You will report to the Senior Director of Information Security.

Requirements

Bachelor's Degree in Information Security preferred or equivalent years of experience
1-4 years in an information technology related discipline, with at least 2 years in information security preferred
Experience working with and securing cloud platforms such as Azure, AWS, and GCP
Experience working with Microsoft Purview or other similar compliance tools focused on Insider Threats and Digital Loss Prevention
Intermediate knowledge of network architecture and network, system, and application security
Intermediate knowledge of Windows server and Unix/Linux operating systems
Working knowledge of security frameworks, regulatory requirements, and industry standards such as NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA

Responsibilities

Implement security and compliance processes that support application security, vulnerability management, insider threat monitoring, and data loss prevention initiatives.
Coordinate vulnerability disclosure activities, evaluate reported security findings, and partner with IT and business stakeholders to drive remediation.
Assess security configurations, controls, and monitoring tools to identify emerging threats and recommend corrective actions.
Evaluate and respond to security events identified through SIEM alerts, supporting investigation, containment, and remediation efforts.
Maintain security and compliance metrics, dashboards, and reporting tools to improve operational effectiveness and risk visibility.
Investigate, resolve, and document user-reported security incidents through root cause analysis and corrective actions, including participation in on-call support rotations.
Support strategic information security initiatives, including identity and access management, endpoint protection, and disaster recovery efforts.