Security Analyst I

Title:

Security Analyst I Summary of Role The Security Analyst I exists to help protect Command Alkon's systems, data, and customers by keeping security operations running day to day. The role sits in Security Operations within TechOps and works closely with the Security Manager. The analyst watches security alerts and event logs across endpoints, networks, and cloud systems, triages and escalates issues, and helps respond to incidents under senior guidance. That work protects the platform that heavy building materials suppliers, haulers, and contractors depend on. The analyst also drives outcomes through vulnerability management and access reviews, which means scanning systems, tracking fixes, and following up with system owners until findings close. Compliance support is part of the same loop, with evidence collection, control testing, and audit preparation that keep the company's security posture provable to customers and auditors. The analyst collaborates across IT, engineering, and system owners who fix the findings, and documents policies, procedures, and runbooks so the team can repeat what works. Because the role is fully remote, close coordination with the team through tickets and documentation is essential, and it builds the foundation for a path toward a mid-level analyst role. Applicants must be currently authorized to work in the United States on a full-time basis. This position is not eligible for employment visa sponsorship. How You’ll Succeed · Triage every monitoring alert in the queue, escalating real issues to the Security Manager with clear notes. · Close assigned vulnerability findings on schedule, and follow up with each system owner until the fix is verified. · Complete access review and deprovisioning audits on time, with every exception documented and assigned to an owner. · Keep policies, procedures, and runbooks current, so a teammate can follow them without asking questions. · Collect audit evidence before each request is due, so control testing and audit prep do not stall. · Document incidents accurately during response and complete post-incident follow-up tasks on time. · Track every security ticket from open to resolution, with status updates that the team can act on without asking. · Learn the company's environment well enough to tell routine alerts from ones that need escalation. · Take on additional tasks as skills grow and say clearly when a task is beyond current skill so it can be reassigned. · Communicate in writing with clear, complete detail, since documentation is a core part of the job. · Work well in a remote setting by posting status early, responding to team messages promptly, and asking for help before a blocker grows. · Build toward a mid-level analyst path by picking up one new skill at a time, such as scripting, a cloud security concept, or a SIEM workflow. What You Bring Technical Skills and Experience · Foundational networking knowledge: TCP/IP, DNS, and firewalls. · Working knowledge of Windows and macOS. · Log and alert triage across endpoint, network, and cloud systems. · Vulnerability scanning and remediation tracking. · Access review and provisioning or deprovisioning audit support. · Basic scripting in Python, PowerShell, or Bash. · 0-2 years in security, IT, or a related technical field, including internships, help desk, or sysadmin work. Compliance and Documentation · Evidence collection and control testing support for audits. · Clear, precise written documentation for policies, procedures, runbooks, and incident records. · Communication and collaboration · Clear written communication, especially for documentation. · Clear follow-up with system owners on open findings. · Coordination with the Security Manager and team in a remote setting.

Learning Agility and Attitude · Genuine interest in cybersecurity. · Willingness to learn quickly in a fast-paced environment. · Ability to work independently while staying in step with the team. · Attention to detail.

Credentials (Nice to Have) ·

A degree in Computer Science, Information Security, or IT, or equivalent hands-on training with applicable certifications. Who You Are Manages Complexity: You make sense of complex, high quantity, and sometimes contradictory information to effectively solve problems. Nimble Learning: You actively learn through experimentation when tackling new problems, using both successes and failures as learning fodder. Action Oriented: You take on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm. Tech Savvy: You anticipate and adopt innovations in business-building digital and technology applications. Communicates Effectively: You develop and deliver multi-mode communications that convey a clear understanding of the unique needs of different audiences. All Company Core Competencies Customer Focus: You build strong customer relationships and deliver customer-centric solutions. Cultivates Innovation: You create new and better ways for the organization to be successful. Collaborates: You build partnerships and work collaboratively with others to meet shared objectives. Instills Trust: You gain the confidence and trust of others through honesty, integrity, and authenticity. Self-Development: You actively seek new ways to grow and be challenged using both formal and informal development channels.