Junior Security Analyst

Lightspeed DMS•South Jordan, UT

14h

About The Position

Lightspeed is a leading provider of cloud-based software for dealerships and Original Equipment Manufacturers (OEMs), serving the Powersport, Marine, RV, Trailer, Outdoor Power Equipment, and Golf Cart industries. Lightspeed’s Dealer Management Solution (DMS) enables dealerships to optimize their end-to-end business operations, including sales, parts, service, rentals, accounting, and Customer Relationship Management (CRM). When implemented into their daily operations, Lightspeed helps dealers increase their profitability by selling more units, service, and parts, all while creating a more streamlined experience for customers. For nearly 40 years, Lightspeed has been empowering 4,500+ dealers across North America with the tools and technology they need to manage their dealerships. The Junior Security Analyst supports Lightspeed’s cybersecurity operations by assisting with monitoring, analysis, and remediation of security incidents across enterprise systems and cloud environments. Working under the direction of senior analysts, this role helps ensure the confidentiality, integrity, and availability of company data while gaining experience in security tools, processes, and governance activities. The ideal candidate is detail-oriented, eager to learn, and passionate about developing technical and compliance skills in a collaborative environment.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
0–3 years of experience in information security, IT operations, or related technical roles.
Foundational knowledge of networking, operating systems, and cloud environments (AWS, Azure).
Strong experience securing and monitoring cloud environments (AWS, Azure).
Exposure to SIEM or EDR tools such as Splunk, Sentinel, or Defender.
Understanding of basic security concepts (vulnerabilities, exploits, least privilege, encryption).
Excellent analytical, problem-solving, and communication skills.
Knowledge of security frameworks such as NIST CSF and SOC 2.
Ability to work collaboratively in a team-oriented environment.

Nice To Haves

CompTIA Security+, CySA+, or equivalent entry-level certification.
Experience with vulnerability scanners (Qualys, Nessus, or Rapid7).
Exposure to GRC or vendor risk management tools.
Exposure to SIEM platforms, Elastic, Splunk, Security Onion.
Familiarity with scripting or automation (PowerShell, Python).
Demonstrated interest in pursuing a long-term career in cybersecurity operations or compliance.

Responsibilities

Monitor and investigate security alerts and events across SIEM, EDR, and network systems.
Assist in the investigation of potential security incidents under senior analyst guidance.
Help maintain documentation of incidents, findings, and remediation steps.
Perform vulnerability scanning and tracking remediation efforts.
Support maintenance of security tools and platforms (endpoint protection, SIEM, firewalls).
Assist with compliance tasks related to SOC 2, internal audits, and risk assessments.
Assist with gathering security metrics and reports on a monthly basis.
Contribute to updating security policies, standards, and procedures.
Perform third-party vendor security reviews and due diligence processes.
Assist in security awareness initiatives and internal training activities.
Collaborate with IT and engineering teams to ensure secure configurations and patch compliance.
Assist in the creation of automation scripts and the integration of AI with security workflows.