Security Analyst

Bonney Forge Corporation • Houston, TX

1d

About The Position

The Security Analyst is responsible for the day-to-day implementation, monitoring, analysis, and maintenance of the organization's cybersecurity controls. The role supports identity and access management, endpoint and network security, vulnerability management, security monitoring, incident response, compliance, and security awareness.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent relevant technical experience.
• 3 to 5 years of IT experience, preferably including systems, networking, Microsoft 365, or cybersecurity responsibilities.
• Relevant certifications preferred, such as CompTIA Security+, CySA+, Microsoft SC-200, SC-300, or SC-400.

Nice To Haves

• 1 to 3 years of direct information-security experience.
• Relevant certifications such as CompTIA Security+, CySA+, Microsoft SC-200, SC-300, or SC-400.

Responsibilities

• Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
• Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
• Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
• Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
• Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
• Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
• Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
• Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
• Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
• Maintain security documentation, incident records, technical procedures, and remediation tracking.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level