Security Analyst

Parker Poe•Raleigh, NC

About The Position

Parker Poe is seeking a Security Analyst to help safeguard the firm’s technology, data, and users through proactive cybersecurity operations. Reporting to the Director of Infrastructure and Security, the Analyst will monitor security events, investigate threats, support incident response and vulnerability management efforts, and collaborate across technology teams to strengthen security controls and reduce risk. This role is suited to a curious, detail-oriented professional who enjoys solving complex challenges and making a meaningful impact on organizational security. This is a full-time position preferably based in Parker Poe’s Charlotte, North Carolina office. Candidates may also be based in the firm’s Raleigh, North Carolina, or Columbia, South Carolina offices. Occasional on-call coverage and work outside regular business hours, including evenings and overnight, may be required to support security incidents, maintenance activities, and other business needs.

Requirements

At least three years of information technology, cybersecurity, information security, or related experience, and a bachelor’s degree in information technology, computer science, or a related field; or a combined equivalent of education and experience.
Experience supporting cybersecurity operations, including security monitoring, threat detection, incident response, vulnerability management, or related security functions.
Experience analyzing security alerts, logs, and technical data.
Familiarity with endpoint, network, identity, email, and cloud security concepts and technologies.
Strong written and verbal communication skills, including the ability to explain technical concepts and security risks to technical and non-technical audiences.
Strong customer service skills, a sense of urgency, and the ability to multitask in a fast-paced environment.
Ability to work independently, exercise sound professional judgment, and handle sensitive and confidential information with discretion.
Ability to participate in occasional on-call coverage and work outside regular business hours, including evenings, overnight hours, weekends, and holidays, as needed.

Nice To Haves

Experience in a legal, professional services, financial services, or other security-conscious environment.
Relevant cybersecurity certifications, such as CompTIA Security+, CySA+, Microsoft Security certifications, GIAC, or similar credentials.
Experience with Microsoft security technologies, including Microsoft Entra ID, Intune, Active Directory, Microsoft 365, Microsoft Defender, or similar platforms.
Familiarity with cybersecurity frameworks, regulatory requirements, compliance activities, audits, or security assessments.
Experience with CrowdStrike Falcon, SIEM platforms, endpoint detection and response (EDR), or related security technologies.

Responsibilities

Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and assess cybersecurity risk.
Support incident response, including containment, remediation, recovery, and post-incident reviews.
Document investigations, response activities, and findings to support incident management and continuous improvement.
Assess and escalate significant security events, providing technology leaders with timely, actionable information.
Stay current on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends.
Support vulnerability management by identifying, assessing, prioritizing, and tracking remediation efforts.
Coordinate remediation with Infrastructure, Applications, and other technology teams to reduce cybersecurity risk.
Support the implementation, maintenance, and evaluation of cybersecurity controls.
Contribute to identity and access management, including privileged access controls, account governance, and periodic access reviews.
Assist in maintaining and enhancing security technologies across endpoint, identity, network, cloud, monitoring, and detection environments.
Identify opportunities to strengthen security processes, controls, and operational effectiveness through continuous improvement and proactive risk reduction.
Maintain accurate security procedures, investigation records, and operational documentation.
Contribute to internal and external audits, assessments, and compliance efforts.
Gather and organize evidence demonstrating the effectiveness of security controls and compliance practices.
Support standardized, policy-driven security processes and operational procedures.
Build working relationships with cross-functional technology teams to identify risks, strengthen controls, and support a secure technology environment.
Communicate security findings, risks, and remediation recommendations to technical and non-technical audiences.
Champion cybersecurity awareness initiatives and encourage security best practices.
Perform other duties as assigned by leadership.