Info Security Analyst I

Maritz•Fenton, MO

7d•Hybrid

About The Position

As a member of the Engagement Solutions Business Information Security Team, Analysts are responsible for partnering with business and technology teams to identify, assess, and mitigate information security risks while supporting Maritz's overall information security program through security reviews, vulnerability management, threat evaluation, incident response support, DevSecOps initiatives, risk assessment, fraud operational support, and audit / compliance activities. Working under the guidance of senior security professionals, the analyst helps evaluate business processes, applications, and technologies to ensure alignment with security policies, regulatory requirements, and industry best practices. This position serves as a liaison between security, technology, and business stakeholders while developing foundational expertise in cybersecurity, risk management, governance, compliance, fraud protections, and security operations.

Requirements

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field of study; equivalent practical experience may be considered in lieu of a degree.
At least two years of experience within information security.
Ability to research unfamiliar technologies, analyze technical documentation, troubleshoot issues, and develop practical recommendations or solutions.
Knowledge of fundamental cybersecurity concepts including risk management, vulnerability management, incident response, secure software development, network security, cloud security, and authentication and authorization principles.
Strong written and verbal communication skills with the ability to communicate technical concepts, security requirements, and risk-based recommendations to both technical and non-technical audiences.
Ability to work independently and within a team environment to identify and analyze security risks, formulate recommendations, and coordinate remediation activities across multiple stakeholders.

Nice To Haves

Basic scripting, automation, or data analysis experience using Python, PowerShell, SQL, APIs, Bash, Power Automate, or similar technologies preferred.
Familiarity with cybersecurity frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, PCI DSS, SOC 1, and SOC 2.
Experience working with cloud platforms, application security tools, vulnerability management platforms, source code repositories, CI/CD pipelines, or ticketing systems preferred.
Security+, Network+, GSEC, or other security-focused certifications.
Academic research experience, cybersecurity competition participation, internships, homelab projects, or other hands-on technical experience.
Exposure to cloud-native architectures, containers, APIs, infrastructure-as-code, or DevSecOps practices.
Experience using collaboration, DevOps, cloud, and security platforms such as Jira, Confluence, Bitbucket, Rapid7, SonarQube, GCP (and SCC), Azure, AWS, or similar technologies.

Responsibilities

Support secure use case reviews, application security assessments, architecture reviews, security exception requests, and third-party/vendor risk evaluations.
Research emerging technologies and security requirements to identify risks and recommend appropriate controls, mitigations, and security best practices.
Support vulnerability management and DevSecOps initiatives by reviewing vulnerability findings, evaluating remediation plans and extension requests, maintaining application security scans, tracking remediation activities, coordinating efforts with application, infrastructure, and DevOps teams, and assisting with the evaluation and response to emerging security threats and vulnerabilities.
Support security governance, compliance, and audit activities including customer security assessments, PCI and SOC evidence collection, policy and standards maintenance, and responses to client security questionnaires and vendor assessments.
Develop, maintain, and utilize security reporting, automation, and analysis solutions through scripting, APIs, security tools, and data analysis to improve operational efficiency and provide meaningful security metrics.
Collaborate with development, DevOps, infrastructure, business, and security teams to communicate security requirements, support remediation efforts, assist with security initiatives, promote secure practices, and contribute to continuous improvement efforts.