Information Security Analyst II

Aureon•West Des Moines, IA

2d•Onsite

About The Position

This role involves monitoring, analyzing, investigating, and reporting on security events, alerts, vulnerabilities, and risks across the organization’s information systems. The analyst will independently perform incident response activities, conduct advanced threat hunting, and manage vulnerability management programs. Responsibilities also include developing and maintaining security use cases and alerting logic, performing security reviews of infrastructure and applications, partnering with IT teams on security control implementation, leading vendor security assessments, and assisting with security governance initiatives. The position requires evaluating emerging threats, participating in audits, developing security metrics, leading security awareness initiatives, and assisting in the development of incident response plans and procedures. Process improvements and after-hours incident response are also part of the role.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or related field, or equivalent combination of education and experience.
3+ years of experience in information security, cybersecurity operations, security engineering, security administration, or related technical roles.
Strong understanding of security frameworks, risk management methodologies, and cybersecurity best practices.
Experience investigating cybersecurity incidents and conducting security event analysis.
Experience with vulnerability management programs and remediation coordination.
Experience supporting enterprise security technologies including SIEM, endpoint protection, email security, identity security, and network security controls.
Working knowledge of cloud security concepts, Microsoft 365 security controls, identity and access management, and security monitoring practices.
Experience documenting risks, findings, recommendations, and technical procedures.
Strong analytical, investigative, and critical-thinking skills.
Advanced ability to troubleshoot and analyze complex security issues.
Ability to independently prioritize and manage multiple security initiatives.
Strong written and verbal communication skills with both technical and non-technical audiences.
Excellent presentation and documentation abilities.
Ability to influence security decisions through education, collaboration, and risk-based recommendations.
Strong organizational and project management skills.
Ability to maintain confidentiality and handle sensitive information with discretion.
Demonstrated leadership and mentoring skills.
Commitment to continuous improvement and professional development.

Nice To Haves

One or more industry certifications such as: Security+ GSEC SSCP CySA+ CISM CISSP CISA GIAC certifications
Experience with: Microsoft Sentinel Microsoft Defender suite Vulnerability management platforms Privileged Access Management (PAM) Security automation and orchestration solutions Cloud security platforms Threat intelligence platforms
Familiarity with: NIST Cybersecurity Framework (CSF) CIS Controls ISO 27001 PCI-DSS CPNI SOC 2
Experience conducting security assessments and risk reviews.
Experience leading security projects and initiatives.

Responsibilities

Monitor, analyze, investigate, and report on security events, alerts, vulnerabilities, and risks across the organization’s information systems.
Independently perform incident response activities including triage, containment, eradication, recovery, root cause analysis, and post-incident reporting.
Conduct advanced threat hunting activities to identify malicious activity, security gaps, and emerging threats.
Perform vulnerability management activities including scanning, risk analysis, remediation planning, validation, and executive reporting.
Develop and maintain security use cases, alerting logic, dashboards, correlation rules, and reporting within security monitoring platforms.
Perform security reviews of infrastructure, cloud services, applications, and business systems to identify security risks and recommend corrective actions.
Partner with IT teams to implement security controls, hardening standards, and remediation activities.
Lead vendor security assessments and third-party risk evaluations.
Assist with security governance initiatives including policy development, standards maintenance, risk assessments, and compliance activities.
Evaluate emerging threats, vulnerabilities, and industry trends and recommend improvements to strengthen the organization's security posture.
Participate in internal and external audits by gathering evidence, documenting controls, and validating security requirements.
Develop security metrics, dashboards, and reporting for leadership.
Lead security awareness and education initiatives throughout the organization.
Assist in developing and maintaining incident response plans, playbooks, security procedures, and technical standards.
Recommend and implement process improvements that enhance operational efficiency and reduce organizational risk.
Participate in after-hours incident response as required.
Perform other duties as assigned.