Information Security Analyst

Trulieve•Monroe, FL

7d•Remote

About The Position

The Information Security Analyst maintains, monitors, and improves Trulieve’s security posture. The role supports daily cybersecurity operations, incident response, and the management of endpoint, cloud, and infrastructure security tools. The analyst collaborates across teams to remediate threats, validate controls, support compliance efforts, and contribute to strategic security initiatives. The position is remote and regular full-time, with a 40+ hour workweek and flexible hours depending on department needs. Salary is commensurate with experience. A comprehensive benefits package, including paid time off, is offered.

Requirements

Bachelor’s degree or equivalent experience in Computer Science, Engineering, Information Technology, or a related discipline.
At least 3 years of experience in Information Security SOC/SIRT, implementing security best practices, or in a system administrator role.
Experience working in cloud infrastructure.
Experience monitoring and responding to security alerts and events.
Experience with Office 365 and Azure services.
Self-motivated and able to work effectively with some supervision.
Ability to build professional relationships and communicate effectively.
Solid customer-focused mindset.

Nice To Haves

Security or advanced IT certification, such as Security+, MCSA, GIAC, or equivalent; desired but not required.

Responsibilities

Collaborate with engineers, architects, vendors, IT and Security leadership, and cross-functional teams to design secure, highly available production environments, enforce security requirements, address identified risks, and suggest strategic plans.
Monitor, triage, and follow up on security alerts from the SIEM system and other monitoring services; escalate incidents according to the response plan; document actions; notify appropriate team members; and recommend alert logic improvements.
Manage incidents using endpoint tools to contain and remediate threats; review endpoint threats, maintain protection agents, and update response playbooks.
Respond to cloud security alerts, validate controls, resolve misconfigurations, support automation, and maintain a secure environment for end users.
Document security activities and support audits with evidence and validation; automate record-keeping as needed.
Generate InfoSec operations reports, analyze metrics and trends, and recommend process and system improvements.
Support strategic security projects by delivering assigned tasks, identifying risks, and recommending scalable solutions.
Promote cybersecurity awareness, support legacy infrastructure, and maintain a disciplined, systematic approach to tasks.
Apply practical problem-solving, communication, and organizational skills while working with current and emerging technologies; adapt to changing environments and provide detailed solutions with some supervision.