Information Security Analyst II

PT Solutions Physical Therapy•Atlanta, GA

4d•$105,000 - $121,000

About The Position

As the Information Security Analyst II at PT Solutions, you will be a mid-level cybersecurity professional responsible for supporting the operation and continuous improvement of PT Solutions’ information security program. The role independently manages assigned security responsibilities, supports risk reduction efforts, and collaborates across the organization to help protect PT Solutions’ systems, data, and business operations. Strong ownership, sound judgment, adaptability, and effective communication are essential to success in this role.

Requirements

Strong incident-response, investigation, and evidence-handling skills with the ability to independently manage moderate-complexity security events and assigned security responsibilities.
Strong working knowledge of SIEM/SOC operations, EDR, email security, identity security, cloud security, and data-security monitoring.
Ability to perform advanced log analysis and correlate events across endpoint, identity, email, network, SaaS, and cloud telemetry.
Working knowledge of Microsoft 365, Entra ID, Windows security, networking concepts, authentication protocols, and common attacker techniques.
Working knowledge of cloud and SaaS security concepts, identity-centric security, least privilege, Zero Trust principles, and the security considerations associated with modern enterprise platforms and integrations.
Familiarity with vulnerability management, patch/remediation workflows, CVE/CVSS concepts, CISA KEV, and risk-based prioritization.
Ability to assess technical risk and communicate findings clearly to technical teams, leadership, and non-technical stakeholders.
Ability to create clear, repeatable SOPs, investigation notes, executive summaries, and audit-ready evidence.
Demonstrated ability to prioritize competing responsibilities, manage deadlines, and work successfully in a fast-paced, distributed environment.
Demonstrated ownership, initiative, sound judgment, and willingness to proactively resolve blockers and escalate when risk or business impact requires it.
Working knowledge of healthcare data-security considerations, including PHI/HIPAA and PCI-related requirements.
Familiarity with security automation, orchestration, and scripting concepts, including tools such as PowerShell, for investigation, response, data collection, control validation, and task optimization.
Experience with enterprise security technologies across areas such as SIEM/SOC operations, endpoint security, email security, identity security, data security, vulnerability management, SaaS, and cloud platforms.
Knowledge of artificial intelligence (AI) fundamentals, including generative AI concepts, appropriate enterprise use, data protection considerations, security risks, prompt/data handling, and responsible use of AI-enabled tools.
Ability to evaluate emerging technologies and changing business requirements from a security perspective and adapt security practices as the organization, technology landscape, and threat environment evolve.
Associate degree in Information Technology, Cybersecurity, Computer Science, or a related field required; bachelor's degree preferred. Equivalent relevant experience may be considered in accordance with PT Solutions hiring practices.
3-5 years of relevant cybersecurity operations, SOC, incident response, security engineering support, or similar experience.

Nice To Haves

One or more relevant certifications preferred, such as Security+, CySA+, GCIH, SC-200, AZ-500, CCNA Cybersecurity, GCIA, Cloud+, PenTest+, or comparable industry certifications.

Responsibilities

Independently monitor, investigate, and respond to security events across enterprise technologies and security platforms, determining severity, business impact, and appropriate response.
Perform advanced analysis and correlation of security data to identify malicious activity, policy violations, control gaps, and other potential risks.
Collaborate with internal teams, managed security providers, and vendors to improve detection, escalation, response, automation, and overall security operations.
Identify opportunities to improve, automate, orchestrate, and scale security processes and controls as PT Solutions' technology environment, business operations, and threat landscape evolve.
Lead or materially support response to moderate-to-complex security incidents and investigations, including coordination of containment, remediation, recovery, and evidence-preservation activities.
Document investigation timelines, evidence, findings, impact, actions taken, root cause, and lessons learned in a manner appropriate for leadership, Legal, HR, Compliance, or audit review.
Immediately escalate high-severity, business-critical, or time-sensitive incidents and maintain clear communications through closure.
Support vulnerability and exposure management activities by validating risk, prioritizing remediation, coordinating with system owners, and verifying closure of high-risk vulnerabilities and control gaps.
Support security assessments, remediation workflows, penetration testing, control validation, and related evidence collection.
Evaluate the effectiveness of security controls across enterprise technologies and drive documented exceptions or deficiencies toward resolution.
Investigate identity, access, data, SaaS, and cloud security anomalies across enterprise platforms and security technologies.
Support identity governance, privileged access, access reviews, authentication controls, and account lifecycle-management activities.
Apply identity-centric, least-privilege, and Zero Trust principles when supporting security controls and technology decisions.
Monitor and respond to security events involving confidential, sensitive, or regulated information, including PHI, PII, and PCI data.
Collect, validate, organize, and retain security evidence supporting regulatory, contractual, audit, customer, and internal assurance activities.
Support security risk assessments, third-party and vendor security reviews, remediation tracking, and communication of findings in clear business-risk terms.
Maintain repeatable procedures, playbooks, investigation records, evidence packages, and control documentation that support consistent and auditable security operations.
Support the investigation and response to user-reported security concerns, phishing, impersonation, and other human-targeted threats.
Support security awareness activities, simulations, metrics, trend analysis, and follow-up actions designed to reduce user-related risk.
Own assigned work through completion, proactively research issues, engage appropriate internal or external resources, and escalate blockers or risks in a timely manner.
Balance incident-response priorities with recurring operational responsibilities, deadlines, and service expectations in a fast-paced environment.
Provide concise, outcome-based updates that clearly communicate completed work, current risk, blockers, decisions needed, and next steps.
Provide guidance and mentoring to other team members in security operations, investigations, evidence collection, documentation, and repeatable procedures.
Participate in after-hours incident response or escalation support when required by business need.
Perform other duties, responsibilities, security reviews, investigations, projects, and operational support activities as assigned or reasonably required to support PT Solutions business, technology, compliance, and information security objectives.
Provide security support for new technologies, integrations, acquisitions, business initiatives, and organizational changes, including identifying security considerations and assisting with the implementation of appropriate controls.