Security Analyst

USC/GCNeed LinkedIn, VISA DL9-12 years of profiles Greenwich OR Palm Beach- LocalS Hybrid 2 days in the office I would say its a solid mid level role. This is a hands-on operational role centered on keeping our tools healthy, well-tuned, and well-documented. We are looking for someone organized, detail-oriented, and reliable, with a foundational security background (Security+ and/or CySA+) and the discipline to own recurring tasks and keep them on track with minimal oversight. Core Responsibilities Tool health monitoring & maintenance Proactively watch for and resolve (or elevate) tool-health issues, such as: oServers or endpoints that stop reporting into Sumo Logic and our other security tools. oTenable Vulnerability Scans and Maintenance oDefender, ThreatLocker, or other agents going offline, outdated, or missing. oFortinet / FortiSASE health and connectivity issues. Run routine configuration and policy reviews to catch drift and gaps. Documentation Document recurring issues, their causes, and how they were resolved. Build and maintain runbooks, SOPs, and asset inventories, keeping them current as things change — supporting our ISO 27001:2022 ISMS. Keep clean records of configuration changes and exceptions. Gather and organize evidence for our Internal Audit team — configurations, logs, reports, and records — to support ISMS and audit activities. Staying current Keep up with new features and capabilities across our tools (release notes, vendor updates) and flag/document anything worth adopting. Routine operations Tune alerts to reduce false positives and noise, under direction. Maintain allowlists, exceptions, and approval requests. Review and clean up email quarantines (Mimecast, Abnormal AI, Defender for Office 365). Administer KnowBe4 — run security awareness training and phishing-simulation campaigns, track completion, and report results. Reporting Generate recurring reports across the stack — tool health and coverage, alert volumes and trends, vulnerability status, email security metrics, and phishing/training results. Produce summary reports for management and metrics/KPIs that feed our ISMS reviews. Build standardized, reusable report templates so recurring reports are consistent and efficient to produce each cycle. What to Look For in a Candidate Required CompTIA Security+ and/or CySA+ (or actively pursuing). Foundational security knowledge: CIA triad, common attack types, networking fundamentals (TCP/IP, DNS, ports), basic log review. Familiarity with Windows and the Microsoft 365 / Entra / Azure ecosystem. Strong attention to detail and a methodical, organized approach. Reliability and follow-through on recurring tasks; comfortable following procedures and asking questions. Clear written communication for documentation and reporting. Nice to have Hands-on exposure to any of our tools (listed below) — we don't expect all of them. Experience working alongside an MDR/MSSP or managed SOC. Greenwich, Connecticut, United States 06831 +1 more location Salary Range: $000,000 – $000,000 Salary range is not shown on the candidate portal #J-18808-Ljbffr