IT Security Analyst I

Ulteig

6h•Hybrid

About The Position

The IT Security Analyst is a hands-on technical role responsible for actively protecting the organization’s systems, data, and users. This position goes beyond policy and governance and is deeply involved in day-to-day security operations, monitoring, investigation, implementation of controls, and direct response to security risks and incidents.

Requirements

Typically 2+ years of hands-on experience in IT, security operations, or a related technical role
Practical experience working with systems, security tools, or cloud platforms in a production environment
Experience with at least one SIEM platform (e.g., FortiSIEM, Sentinel, Splunk) and one endpoint detection and response (EDR) solution
Familiarity with cloud security principles in Azure and/or AWS environments
Working knowledge of identity and access management concepts and controls
Understanding of logging, monitoring, and alerting practices in operational environments
Exposure to or experience supporting compliance frameworks such as NIST, CIS, ISO 27001, or SOC 2
Strong understanding of how security controls function in real-world environments—not just on paper
Comfort investigating issues, validating configurations, and working through technical details
Ability to translate technical findings into clear risk insights and actionable remediation steps
Collaborative mindset with the ability to work effectively across infrastructure, cloud, and application teams
Bachelor’s degree in Cybersecurity, Information Technology, or related field, or equivalent hands-on experience
Must have authorization to work permanently in the United States.

Responsibilities

Actively monitor SIEM, endpoint, and identity systems to detect suspicious activity and potential threats.
Analyze logs, alerts, and telemetry to identify anomalies and indicators of compromise from Security tools such as EDR, SIEM, and email security alerts.
Perform hands-on investigation of security events and incidents, supporting containment, eradication, and recovery efforts.
Conduct root cause analysis and document findings and lessons learned
Configure, tune, and maintain security tools, including endpoint protection, identity controls, and logging platforms.
Work directly within cloud, endpoint, and identity environments to implement security improvements and reduce risk.
Conduct security assessments and control testing of systems, configurations, and processes to validate effectiveness.
Translate technical findings into clear risk insights and actionable remediation guidance.
Collaborate closely with infrastructure, cloud, and application teams to embed security into system design and deployment.
Contribute to security automation and tooling improvements to enhance detection and response efficiency.
Identify opportunities to reduce manual effort and strengthen overall security posture.
Support audits and compliance efforts (e.g., NIST, CIS, ISO 27001, SOC 2) through evidence gathering, validation, and remediation.