Junior IT Security Analyst

the Client•Framingham, MA

1d•Onsite

About The Position

As an IT Security Analyst – Junior on the Cyber Engagement team, you will help understand, measure, and deliver social engineering simulations, prompt reinforcement, campaign analysis, and actionable recommendations that support a more secure-minded workforce. We are looking for a motivated, collaborative, detail-oriented IT Security Analyst – Junior who is curious about human behavior, persistent in improving outcomes, and comfortable turning data into practical action.

Requirements

2–5 years of experience in cybersecurity awareness, social engineering simulation, or a related security discipline.
Experience designing, supporting, or measuring social engineering simulations, user awareness campaigns, behavior change initiatives, and remediation efforts.
Ability to transform security and user behavior data into meaningful metrics, executive-level reporting, and risk-informed recommendations.
Experience developing dashboards and reporting using Power BI or similar analytics tools.
Demonstrated ability to analyze complex data in Excel, identify trends and patterns, develop meaningful insights, and present findings in a clear, actionable manner.
Ability to write and execute SQL queries.
Strong analytical, communication, and stakeholder management skills, with the ability to work independently, manage competing priorities, and partner effectively across technical and business teams.

Nice To Haves

Experience using security awareness and training tools (examples: KnowBe4 and Proofpoint).

Responsibilities

Research and monitor the social engineering threat landscape to inform risk-based simulation priorities, campaign themes, and timely response recommendations.
Plan, coordinate, execute, and evaluate social engineering simulations and testing, including phishing, vishing, and other relevant scenarios where appropriate.
Analyze campaign performance, user trends, reporting behaviors, and root causes to identify patterns and opportunities for focused and role-based training.
Translate simulation results and security signals into practical training recommendations, reinforcement needs, and behavior-focused improvement opportunities.
Support in-the-moment and event-driven reinforcement for unplanned or time-sensitive communications, helping reinforce secure behaviors.
Develop clear metrics, dashboards, and leadership-ready summaries that connect human insights to business outcomes and measurable behavior change.
Identify opportunities to streamline, automate, and improve reporting processes, including centralized metrics and KPIs for Cyber Engagement.
Collaborate with Awareness and Training, Cyber Resiliency, business partners, and other stakeholders to align messaging and learning needs.
Support external vendor relationship management for simulation and response capabilities, including coordination and continuous improvement opportunities.