IT Security Analyst

FMIDenver, CO
9d$80,000 - $100,000Hybrid

About The Position

FMI is the leading consulting and investment banking firm dedicated exclusively to the built environment. For over 70 years, we have partnered with organizations across engineering and construction, infrastructure, and related industries to deliver deep industry expertise, trusted advisory services, and forward-looking insights. With a national and international footprint, FMI helps clients shape their strategies, strengthen their businesses, and achieve their goals in a rapidly changing world. FMI Corporation is seeking an IT Security Analyst to join our Corporate Services team. This mid-level role focuses on daily security monitoring, incident response, identity and access management, vulnerability management, and supporting FMI’s ongoing cybersecurity maturity efforts. The position will report to the Director of IT and Security and will work closely with FMI’s IT Systems Engineer, internal IT team members, and external security partners. The ideal candidate will have 3–5 years of hands-on security or IT operations experience, strong analytical skills, and a passion for advancing security best practices across the organization. This is a full-time job based in our Denver office, in Cherry Creek, with an expectation of being on-site at least 3 days per week aligned with FMI’s hybrid work model. Applicants must be legally authorized to work in the U.S. on a full-time basis. FMI is unable to provide visa sponsorship—including H-1B or STEM OPT—at this time.

Requirements

  • Bachelor’s degree in information security, computer science, or related field (or equivalent experience).
  • 3–5 years of experience in information security, IT operations, or system administration.
  • Experience managing Microsoft 365 Defender, Cisco Secure Endpoint, and SIEM systems.
  • Familiarity with NIST or ISO 27001 frameworks, incident response processes, and vulnerability management.
  • Exposure to compliance programs such as NIST CSF, ISO 27001, or SOC 2.
  • Scripting or automation experience (PowerShell or Python).
  • Relevant certifications: CompTIA Security+, Microsoft SC-200, or CySA+ preferred (required within 6 months of hire)
  • Ability to work both independently and collaboratively in a small team environment.
  • Strong documentation, reporting, and communication skills.
  • Ability to travel up to 10% to regional offices (Raleigh, Denver, Houston, Tampa).
  • Ability to perform computer-based work for extended periods and occasionally lift up to 10 lbs.
  • Must be able to commute to the office three or more days per week.

Nice To Haves

  • CISSP or similar certifications are a plus.

Responsibilities

  • Monitor and respond to security alerts, incidents, and suspicious activity across FMI’s systems and tools.
  • Support identity and access management, including MFA, conditional access, privileged access, and user lifecycle processes.
  • Perform vulnerability scanning, support monthly patching cycles, and track remediation progress.
  • Maintain and improve SIEM operations, including log ingestion, detections, dashboards, and reporting.
  • Assist in phishing simulations, user awareness efforts, and security education initiatives.
  • Contribute to incident response activities, including investigation, containment, documentation, and root-cause analysis.
  • Maintain accurate security documentation, procedures, system diagrams, and compliance-related records.
  • Collaborate with IT and business teams to integrate security best practices into applications and processes.
  • Prepare monthly and quarterly summaries of security metrics, trends, vulnerabilities, and risk items for leadership.
  • Use scripting or automation (PowerShell/Python) to streamline alert triage, evidence collection, and reporting.

Benefits

  • FMI provides a comprehensive benefits package that includes paid employee medical insurance, life insurance, long-term disability, a strong 401(k) plan, PTO, parental leave, and optional benefit elections.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service