Sr. Security Analyst - I.T.

Baker Group•Ankeny, IA

1d•Onsite

About The Position

The Senior Security Analyst – IT serves as a technical leader within Baker Group's cybersecurity function, responsible for advanced threat detection, complex incident response, security architecture input, and the maturation of the organization's security program. This role leads investigations into significant security events, drives improvements to controls and processes, mentors junior analysts and acts as a trusted advisor to IT leadership and business stakeholders on risk-based security decisions. This is an individual contributor role with technical mentorship responsibilities. Performs related work as required.

Requirements

Bachelor's degree in computer science, cybersecurity, information systems, or related field, or equivalent relevant experience required
Minimum of five years' experience in information security, with demonstrated progression of responsibility
Hands-on experience with incident response across the full lifecycle (detection, containment, eradication, recovery)
Deep working knowledge across multiple of the following: SIEM, EDR, firewalls, identity and access management and cloud security (Azure and/or AWS)
Working knowledge of NIST CSF or CIS Controls, or SOC2, including practical experience applying controls in a production environment
Demonstrated ability to identify, prioritize, and mitigate complex network and application vulnerabilities, along with the capacity to clearly explain risk and prevention strategies to technical and non-technical audiences
Skilled in risk-based decision making, weighing security needs against operational and business impact
Excellent verbal and written communication skills, with proven ability to influence without authority
Ability to lead under pressure during active security incidents
Strong problem-solving skills with a methodical, evidence-based approach to investigation
Demonstrated coaching and mentorship ability
Passion for technology and strong desire to work with new technologies

Nice To Haves

CompTIA Security+
CISSP
CISM, CISA, GCIH, GCIA or GSEC

Responsibilities

Contribute to complex incident response investigations, including containment, eradication, recovery and post-incident reporting.
Design, tune, and continuously improve detection content across SIEM, EDR and other security platforms.
Conduct threat hunting based on threat intelligence, attacker tradecraft and environmental telemetry.
Provide security architecture input on new systems, applications, cloud service and infrastructure changes.
Provide strategic direction for the vulnerability management program — risk-based prioritization and exception review.
Serve as a senior point of contact for internal and external audit engagements; review evidence, address complex control inquiries and support assessors.
Contribute to the development and maintenance of security policies, standards and procedures aligned to NIST CSF, CIS Controls, and applicable regulatory frameworks.
Oversee third-party/vendor risk assessment processes and advise on remediation of identified vendor risks.
Mentor and develop Security Analyst I and II team members through coaching, technical reviews and structured knowledge transfer.
Support tabletop exercises, incident response drills and disaster recovery testing.
Evaluate and recommend new security technologies and process improvements; contribute to implementation of significant changes.
Translate technical security risks into business language for technical and non-technical audiences.
Stay current on emerging threats, vulnerabilities, and security best practices through ongoing training, conferences and professional development opportunities, sharing knowledge across the team.