Sr. Cybersecurity Analyst

Johnson & Quin Inc•Niles, IL

1d•$120,000 - $140,000•Hybrid

About The Position

The Senior Information Security Analyst protects Company organizational systems and data by supporting and enhancing security operations, risk management, and security controls. The role performs advanced analysis and responds to or leads responses to security events, drives risk reduction, supports compliance efforts, and contributes to the ongoing maturity of the organization’s information security program. It operates with a high degree of independence and collaborates across technical and business teams to identify, prioritize, and address security risks. The position is hybrid, based in either the Chicago, Illinois metro area (Niles) or Pittsburgh, Pennsylvania metro area (Freedom), with three days per week on-site and two days remote. The analyst monitors and investigates security events, coordinates incident response and remediation, manages vulnerability and patch risk, supports security controls and engineering, contributes to governance and compliance, coordinates with vendors, and provides security guidance and awareness training.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
At least 6 years of experience in information security or related IT roles.
Understanding of IT infrastructure, including protocols, operating systems, and networks.
Experience with security tools such as SIEM, EDR/XDR, and vulnerability management platforms.
Understanding of incident response processes and security operations workflows.
Strong understanding of network, endpoint, and identity security principles.
Familiarity with patch management processes and security remediation workflows.
Familiarity with cloud security concepts, particularly in Microsoft 365 and/or Azure environments.
Experience supporting audits and compliance programs.
Strong understanding of security frameworks such as NIST CSF, CIS Controls, or ISO 27001.
Strong teaching, interpersonal, and communication skills.

Nice To Haves

Experience with automation or scripting, such as PowerShell or Python.
Relevant certifications such as Security+, CySA+, CISSP, CISM, or equivalent.
Familiarity with Microsoft Azure and Microsoft 365 security technology.
Familiarity with securing Linux systems.

Responsibilities

Monitor, analyze, and respond to or lead responses to security events and alerts across platforms such as SIEM, EDR, email security, and network tools.
Investigate suspicious activity, determine root causes, and coordinate remediation according to Company policy.
Tune and optimize detection capabilities to improve alert quality and reduce false positives.
Develop and implement automation to improve the efficiency and consistency of security operations.
Coordinate with security vendors to troubleshoot issues and improve tool effectiveness.
Participate in or lead incident response, including containment, eradication, and recovery; document incidents, actions, and lessons learned; and help maintain and improve response procedures and playbooks.
Coordinate with external vendors or partners during incident investigations as needed.
Conduct vulnerability scanning and risk assessments, prioritize remediation based on risk and business impact, and coordinate patch management with IT teams.
Track and report remediation progress, vulnerability status, and patch status; work with internal teams and vendors to support remediation.
Evaluate and recommend improvements to security controls and processes; assist with implementing, configuring, and optimizing security technologies.
Support secure system design and configuration in partnership with IT teams, and identify opportunities to automate repetitive security tasks.
Participate in evaluating and selecting security tools and vendors.
Support internal and external audits, including SOC 2 and ISO audits, by gathering evidence and validating controls.
Develop, maintain, and update security documentation, including policies, standards, procedures, and operational playbooks; help ensure alignment with applicable regulatory and industry frameworks.
Manage day-to-day relationships with security vendors and service providers, handle support and escalations, monitor vendor performance, and assist with evaluating new vendors and solutions.
Partner with IT, infrastructure, and business teams to identify and mitigate security risks and provide guidance on security best practices and control implementation.
Develop and deliver security awareness training programs.
Participate in security initiatives and special projects; stay current on threats, vulnerabilities, and security technologies.
Adhere to organizational policies, procedures, compliance requirements, Company Values, the Code of Conduct, and workplace health and safety rules; complete required compliance training on time and in good faith.