Senior IT Security Analyst

Guild Mortgage•,

9h•$82,506 - $118,344•Onsite

About The Position

The Senior IT Security Analyst is a key member of the Information Security team responsible for protecting enterprise systems, data, and infrastructure. This role leads advanced threat detection and response activities, manages security tools and processes, and partners closely with IT, engineering, and business stakeholders to reduce risk and improve the organization’s security posture. This position requires a blend of technical expertise, analytical thinking, and strong communication skills to translate security risks into actionable insights for both technical teams and end-users.

Requirements

A combination of education and experience may be considered in lieu of the Bachelor’s degree.
Minimum four years' experience in IT Audit and/or Enterprise Risk Management, or as a Penetration Tester, Red Team/Incident Responder, Junior Security Operations Analyst, Security Coordinator and/or related required.
Certifications are highly desired such as: Security+, SSCP, CISSP or other IT security certifications.
Familiarity with risk assessment and risk management concepts or processes.
Working knowledge of various regulatory security requirements – particularly Sarbanes-Oxley (SOX), GLBA, and CCPA.
Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
Ability to effectively influence others to modify their opinions, plans, or behaviors.
Good understanding of organizational mission, values, goals, and consistent application of this knowledge.
Strong problem-solving and troubleshooting skills.
Ability to collaborate and maintain a working relationship with stakeholders at all levels and roles in the company.
Confident, energetic self-starter, with strong interpersonal skills.
Comfortable with working shifts and a changing schedule.
Good judgment and a sense of urgency, and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
Instinctive and creative.
Self-motivated and possessing of a high sense of urgency and personal integrity.
Excellent verbal and written communication skills required.
Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
Commitment to company values.
Customer Service - Proactive attention to each person.
Integrity - Do and say what's right.
Respect - Treat others with dignity.
Collaboration - Listen and work together.
Learning - Seek knowledge and strive for improvement.
Excellence – Deliver the unexpected.

Nice To Haves

Certifications are highly desired such as: Security+, SSCP, CISSP or other IT security certifications.

Responsibilities

Serves as the first line of security alert escalation and guidance for IT Security Analysts.
Performs essential duties with minimal supervision for one or multiple areas of the IT Security Program such as vulnerability management, security awareness, threat intelligence, etc.
Monitor data activity and investigate alerts related to data exfiltration, inappropriate access, and policy violations.
Investigate security incidents involving sensitive data, including unauthorized access and data leakage.
Partner with the Incident Response team to contain, remediate, and document data-related incidents.
Develop and maintain runbooks for data protection incident handling and escalation.
Works closely with IT Security Engineers to draft runbooks, tune alerts, collaborate on escalations, and generate ideas for new alerting.
Acts as lead for small projects by IT Security Manager and/or Director as needed.
Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems.
Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization.
Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity.
Reviews alerts and data from sensors, and documents formal, technical incident reports.
Works with threat intelligence and/or threat-hunting teams.
Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts.
Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use.
Researches emerging threats and vulnerabilities to aid in the identification of incidents.
Supports network vulnerability scans, security audits, and risk assessments and provides feedback to ensure compliance with corporate security policies and adherence to industry best practices.
Provides users with incident response support, including mitigating actions to contain activity, and facilitating forensics analysis when necessary.
Performs security standards testing against computers before implementation to ensure security.
Ensure authorized access by investigating improper access, revoking access, reporting violations, monitoring information requests by new programming, and recommending improvements.
Participates as a member of the Incident Response Team.
Participates in on-call rotation outside normal business hours.