- Company Name
- HUB International
- Job Title
- Security Analyst
- Job Description
-
Job Title: Security Analyst
Role Summary:
Provide second‑level security incident response, vulnerability management, and posture improvement for an enterprise environment. Collaborate across technical and business units to protect data integrity and confidentiality while enabling business functionality.
Expectations:
• Deliver timely, accurate incident analysis and remediation.
• Maintain proactive threat detection and continuous improvement of security controls.
• Communicate findings and recommendations clearly to stakeholders.
Key Responsibilities:
• Respond to and investigate security alerts and incidents; lead root‑cause analysis and resolution.
• Provide Level II support for incident and request tickets from other technical teams.
• Manage vulnerability assessments, patch management, and remediation coordination with IT and application owners.
• Operate and tune SOAR platforms, analyze logs (KQL/SPL), and maintain security tooling upgrades.
• Contribute to weekly/monthly posture and response operations reporting and metrics.
• Support information security governance, risk assessments, audits, and vendor reviews.
• Liaise with Active Directory / MS Entra ID, cloud infrastructure (AWS, Azure, O365) teams to ensure secure configurations.
Required Skills:
• 2+ years in information security or 3+ years in IT engineering with progressive responsibilities.
• Hands‑on experience with cloud platforms (AWS, Azure) and O365 services.
• Proficiency with Active Directory / MS Entra ID, SOAR solutions, vulnerability assessment tools, and patch management.
• Knowledge of security standards (ISO 27001, NIST 800‑53, SOC 2, PCI, SOX, etc.) and regulatory compliance.
• Ability to write and analyze queries in KQL, SPL, or similar languages.
• Understanding of networking protocols (TCP, DNS, DHCP, firewalls, VPNs, web proxies) and email security (SMTP, SPF, DKIM, DMARC).
• Incident response experience with malware, endpoint detection & response, and anti‑virus tools.
• Strong prioritization, critical thinking, communication, and project coordination skills.
Required Education & Certifications:
• Bachelor’s degree in a relevant field or equivalent education/experience.
• Preferred certifications: GSEC, CISSP, AWS Security Specialty, or equivalent.