Security Analyst

Tennessee Housing Development Agency • Nashville, TN

1d • Hybrid

About The Position

Assists with the monitoring, analysis, and protection of the organization’s information systems and data. The Security Analyst supports security operations by identifying, investigating, and responding to security events and incidents; monitoring systems for potential threats; and assisting with the implementation and maintenance of security controls.

Requirements

• Graduation from an accredited two-year college or technical institute with a major in data processing, computer science, or another related acceptable field.
• Five years or more of MS 365 or on-premises Active Directory management.
• Two to four years of experience in information security or a related IT role with security responsibilities.
• Knowledge of information security principles, incident response, and risk management.
• Working knowledge of Microsoft operating systems, identity platforms, and Microsoft 365 environments.
• Strong troubleshooting, analytical, verbal, and written communication skills.
• High level of detail, accuracy, discretion, and sound judgment when handling sensitive information.
• Strong interpersonal skills.
• Excellent troubleshooting and analytical skills.
• Excellent verbal and written communication skills.
• Builds and maintains positive relationships with internal and external constituents.
• Strong organizational skills.
• Strong time management skills; uses time effectively; consistently meets deadlines.
• Documents regularly, thoroughly, accurately, and completely.
• High level of detail and accuracy.
• Exercises good and consistently fair judgment, courtesy, and tact in dealing with the staff and public in giving and obtaining information.

Nice To Haves

• Relevant security certifications (Security+, SC-900, SC-200) a plus.

Responsibilities

• Monitors security systems, logs, and alerts to identify potential security incidents or policy violations; investigates and documents findings and remediation steps.
• Assists with incident response activities including malware infections, phishing attempts, unauthorized access, and account compromise.
• Analyzes system, network, and application logs to detect suspicious or anomalous activity.
• Assists with the administration and monitoring of security tools such as endpoint protection, email security, identity systems, and SIEM platforms.
• Supports vulnerability management activities, including vulnerability scanning, validation of findings, and remediation tracking.
• Assists with identity and access management processes, including access reviews and monitoring for suspicious authentication activity.
• Supports audit, compliance, and risk management activities by gathering evidence and maintaining documentation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree
• Number of Employees: 101-250 employees