Data Security Analyst

Pacific Legal Foundation•Arlington, VA

4h•Hybrid

About The Position

Data Security Analyst You: An early-career IT professional eager to explore the security side of technology while building a foundation in hands-on IT support. You're curious about how systems work, excited to learn from experienced security professionals, and motivated by the challenge of protecting organizational data. You thrive on solving technical problems, take pride in helping colleagues work efficiently and securely, and are comfortable following established processes while you develop your expertise. You're looking for a role that will expose you to both day-to-day IT operations and the fascinating world of cybersecurity. Most importantly, you are customer focused, detail oriented, and eager to contribute to PLF's mission through reliable technology support and disciplined data protection. Them: Bureaucrats, city councils, mayors, governors, and federal agencies stripping Americans of their rights every day. There’s a lot of government overreach out there, and it’s backed by seemingly endless resources. But fortunately, like all lumbering giants, abusive government is most vulnerable when countered by individuals who act strategically and nimbly, take calculated risks, have each other’s backs, and are confident in, and passionate for, the cause—the very sort of swashbucklers we employ in spades here at PLF. Us: We fight back. Pacific Legal Foundation is the nation’s first and most successful public interest law firm dedicated to vindicating individual liberty. PLF has an unmatched record in the U.S. Supreme Court, with 18 victories out of 20 cases heard by the Court. We also have nearly two hundred active cases across the nation. We are a next-generation public interest law firm. What does “next generation” mean for a legal nonprofit? It means we aren’t interested in doing the same thing as everyone else. We aspire to be the best player in a constantly changing game. Here's what you get to do in this role: This is a hybrid role that combines hands-on IT support with entry-level security operations. You'll be the go-to person for our DC office (Arlington, VA) technology needs while gaining significant exposure to cybersecurity practices under the guidance of our Security Operations Manager. This role is designed as a learning opportunity, you'll handle security tasks that follow established procedures while developing the skills and knowledge to potentially specialize in security as your career progresses. Getting down to brass tacks, your specific job duties will likely include:

Requirements

1-3 years of experience in security/IAM, help desk, or related roles with demonstrated experience in IT support or help desk operations.
Experience working with helpdesk ticketing systems (Freshdesk, Zendesk, ServiceNow, or similar).
Strong customer service orientation, you genuinely enjoy helping people solve technical problems.
Strong analytical skills and an investigative mindset.
Excellent communication skills and professional fluency in English (written and verbal) to effectively handle documentation, incident response, and explain technical concepts to non-technical staff.
A willingness to earn security certifications (Security+, Okta, etc.) as needed.
An understanding of and commitment to the organization's mission and vision for individual liberty.

Nice To Haves

A solid understanding of how user accounts, permissions, and access controls work in cloud-based systems, along with general identity lifecycle concepts.
Assisting with onboarding and separation workflows, including helping ensure accounts, access, and data permissions are set appropriately and securely.
Experience with Microsoft 365, Salesforce, Okta, Azure AD/Entra, Intune, or similar cloud platforms.
Awareness of modern IT security threats (malware, phishing, credential theft, spoofing, ransomware, AI-generated attacks, etc.).
Familiarity with EDR tools, email security (CrowdStrike, Darktrace), and DLP systems.

Responsibilities

Serve as primary IT support for DC office staff. Troubleshooting printers, setting up AV equipment for meetings and moot courts, and resolving general technical issues.
Manage IT hardware inventory: monitors, keyboards & mice, cables, and other peripherals to prevent waste and ensure availability.
Configure and set up laptops and workstations for new hires, ensuring devices are ready on day one.
Coordinate onboarding logistics including parking passes, metro cards, and physical security access (key fobs).
Track devices throughout their lifecycle—from deployment through employee departure.
Maintain a ready supply of configured devices to streamline the onboarding process.
Helping maintain PLF’s access control program by assisting with least-privilege reviews, entitlement checks, and regular access audits.
Assisting with onboarding and separation checklists to provision and deprovision system access.
Supporting monitoring activities to identify anomalies, inappropriate data access, or potential policy violations.
Helping coordinate and maintain documentation related to incident response, risk assessments, and data governance activities.
Assisting with evaluating third-party security practices to help ensure vendors meet PLF’s data protection expectations.
Supporting periodic reviews and updates of PLF’s security documentation and guidance materials.
Assisting with the execution of PLF’s security awareness program by helping create training materials, reminders, and guidance for staff.
Participating in internal data-related audits, compliance activities, and record-keeping efforts to ensure adherence to PLF policies.