IT Security Analyst

Security Analyst

The Security Analyst is responsible for managing third-party vulnerability data, executing scans using Sompo’s proprietary tools, and partnering with IT teams to prioritize remediation efforts. The role requires strong technical expertise in vulnerability management tools, security frameworks, and automation. The Security Analyst will also contribute to improving security policies, integrating large data sets, optimizing alerts, and identifying opportunities where AI can support security functions.

Key Responsibilities

Vulnerability Management

• Analyze and consolidate vulnerability data from multiple internal and external sources.
• Input findings into the vulnerability management platform using approved processes to maintain a complete and accurate risk picture.
• Evaluate existing vulnerabilities to identify patterns, root issues, and opportunities for bulk mitigation.
• Escalate vulnerabilities that exceed defined SLA or time-to-resolve thresholds.
• Communicate effectively with cross-functional teams to explain remediation priorities, risks, and required actions.

Scanning & Security Tools

• Configure and manage vulnerability scanning tools and scan schedules.
• Run scans using Sompo’s proprietary tools as well as industry-standard platforms.
• Support web application scanning and collaborate on web application firewall (WAF) improvements.
• Work with container security technologies and standards.

Metrics, Reporting & Documentation

• Generate KPIs, dashboards, and reports to track vulnerability progress and team performance.
• Document processes, workflows, and technical findings in a clear and structured manner.
• Review project scopes and recommend appropriate security benchmarks and hardening standards.

Automation, Logs & Integrations

• Integrate logs and large data sets into existing systems (e.g., SIEM, data pipelines).
• Optimize alerts, policies, and data ingestion processes.
• Explore and evaluate AI-based solutions to enhance efficiency across vulnerability management.

Technical Qualifications

Required Skills

• Strong familiarity with common security protocols and frameworks: DNS, SMTP, PKI, encryption, CWEs, CVEs.
• Hands-on experience with vulnerability scanning tools such as: Nessus, NMAP, ZAP, BurpSuite, Invicti, Nuclei.
• Experience with web application scanning and WAF technologies.
• Understanding of container environments (Docker, Kubernetes).
• Knowledge of CIS benchmarks, STIGs, or other security-hardening standards.

Preferred Skills

• Authentication technologies: SAML, Kerberos, OAuth, OIDC, LDAP.
• Scripting and automation: PowerShell, Python.
• CI/CD tools: Jenkins.
• SIEM and log ingestion: Splunk (indexes, sourcetypes, data models, HEC, apps, forwarders).
• Event streaming & logging: Azure Event Hubs, Kafka, syslog.
• EDR platforms: Sentinel, Microsoft Defender, CrowdStrike, or similar.

General Qualifications

• Strong independent research and analytical skills.
• Systematic and logical troubleshooting approach.
• Ability to create clear, detailed, and structured technical documentation.
• Ability to communicate requirements, risks, and status updates effectively to diverse technical teams.

Education

• Bachelor’s degree in Information Technology or a related field is preferred but not required.