Security Analyst

Security Analyst

About Legence Legence is a leading provider of engineering, consulting, installation, and maintenance services for mission-critical systems in buildings. The company specializes in designing, fabricating, and installing complex HVAC, process piping, and other mechanical, electrical, and plumbing (MEP) systems—enhancing energy efficiency, reliability, and sustainability in new and existing facilities. Legence also delivers long-term performance through strategic upgrades and holistic solutions. Serving some of the world's most technically demanding sectors, Legence counts over 60% of the Nasdaq-100 Index among its clients.

Location: Minneapolis, MN, or near a Legence office.

Travel: Yes, 10-20%

Job Summary:

The Security Analyst is a trusted member of the Legence IT department focused on protecting the organization's computer systems, networks, users, and applications from unauthorized access, theft, or damage. This role involves partnering with analyzing security measures, identifying vulnerabilities, and implementing solutions to enhance and mature the security of the organization's information systems.

Key Responsibilities:

• Cloud Security: Managing and securing our cloud infrastructure, ensuring that our data and systems are protected from unauthorized access and potential security threats.
• Risk management: Identifying, assessing, and mitigating potential security risks to our organization. This includes conducting regular security audits and risk assessments and implementing appropriate measures to reduce our exposure to potential threats.
• Scripting: Developing and maintaining scripts to automate security tasks and improve our overall security posture.
• Monitoring the organization's networks and systems for security breaches or intrusions.
• Developing and implementing security measures to protect the organization's data and systems.
• Keeping up to date with the latest security trends, threats, and technologies.
• Developing and deploying security tooling, policies, automations, and processes.
• Participating in incident response activities as an incident responder, a subject matter expert, and/or a liaison to technology and business teams.
• Contributing to the development of security policies, standards, and playbooks.
• Evangelizing security at all levels of the organization.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience in information security, network security, or a related field.
• Knowledge of security technologies, including firewalls, intrusion detection systems, and encryption.
• Strong analytical and problem-solving skills.
• Demonstrated ability of analytical expertise, close attention to detail, critical thinking, and logic.
• Understanding of basic security concepts (Vulnerability Management, Endpoint Protection, etc.)
• Ability to research technical challenges and learn quickly.
• Excellent communication and interpersonal skills.

Base salary: $95k-$125k per year. This role may be eligible for participation in discretionary bonus plan based on company and individual performance. Notes: Actual compensation will be based on skills, experience, and work location, and may vary from the posted range. Hiring bonuses (and any guaranteed year-end bonuses) are administered under Company policy and are not earned until all stated conditions are met (e.g., active employment on the payment date). This posting reflects compensation at the time of posting and may be updated.

The ideal candidate will have a strong technical background, with experience in security and risk management across infrastructure, application development processes and scripting. You should be able to work independently, as well as part of a team, and have excellent problem-solving and analytical skills.