Senior Security Analyst

Gulf Coast Automation Group•Bloomingdale, IL

5d•Hybrid

About The Position

This is an exciting opportunity to join our client as a Senior Security Analyst, where you will play a critical role in protecting enterprise information assets and advancing the organization's cybersecurity strategy. You'll partner with IT leadership and business stakeholders to design, implement, and enhance security controls while leading incident response, vulnerability management, and security initiatives across both on-premises and cloud environments. If you're a seasoned cybersecurity professional who enjoys solving complex security challenges, mentoring others, and staying ahead of evolving threats, we'd love to connect with you.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent combination of education and experience).
9+ years of progressive cybersecurity experience, including at least 10 years of security-focused work.
Hands-on experience with security technologies including: SIEM, Endpoint Detection & Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Firewalls, Secure Web Proxies
Strong knowledge of: Network security, Penetration testing, Patch management, Vulnerability assessment and remediation
Experience with: MITRE Telecommunication&CK Framework, Threat intelligence platforms, Threat-led penetration testing, Attack simulation, Red Team / Blue Team exercises
Experience managing multiple security tickets and priorities while communicating effectively with stakeholders.
Experience using network monitoring and analysis tools.
Strong understanding of security risks across both on-premises and cloud environments.
Ability to build relationships with business partners and platform owners to proactively identify and mitigate security risks.
Candidates must possess at least one of the following: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CompTIA Advanced Security Practitioner (CASP+)
This role requires authorization to work in the U.S. without current or future visa sponsorship.

Responsibilities

Collaborate with the Security team, IT leadership, business stakeholders, and executive leadership to develop and execute enterprise information security strategies.
Protect the client's on-premises and cloud systems, networks, and applications from security threats and cyberattacks.
Serve as the technical lead during security incidents, coordinating containment, investigation, remediation, and documentation.
Research emerging threat actors, malware, tactics, techniques, procedures (TTPs), and indicators of compromise (IoCs).
Assess, monitor, prioritize, and report on security vulnerabilities across the environment.
Analyze security metrics and reports to identify trends and strengthen the organization's overall security posture.
Perform digital forensic analysis as needed.
Assist in developing and maintaining security standards, policies, procedures, and best practices.
Participate in IT projects to ensure security requirements are incorporated throughout the project lifecycle.
Evaluate emerging cybersecurity technologies and recommend solutions that improve the organization's security posture.
Mentor and provide technical guidance to Security and IT team members.
Participate in an on-call rotation and provide occasional after-hours support.