Information Security Analyst

Company Overview:

Arctiq is a global intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure Networking & Connected Experiences Cybersecurity Data & AI Autonomous Operations & Intelligence and Enterprise Service Management. We help organizations operate secure and modernize complex environments by unifying infrastructure networking data security automation and observability under a single integrated operating model. Our work focuses on helping customers reduce operational friction improve resilience and make better faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

This is a 6-month contract-to-hire opportunity with one of Arctiqs clients. Its a hybrid position in Atlanta GA onsite 2-3 days per week at first then 2 times per month.

Position Overview:

We are seeking an Information Security Analyst II a mid-level cybersecurity professional to support the operation and continuous improvement of our clients information security program. This role independently manages assigned security responsibilities supports risk reduction efforts and collaborates across the organization to help protect systems data and business operations. Strong ownership sound judgment adaptability and effective communication are essential to success in this role.

Responsibilities:

• Independently monitor investigate and respond to security events across enterprise technologies and security platforms determining severity business impact and appropriate response
• Perform advanced analysis and correlation of security data to identify malicious activity policy violations control gaps and other potential risks
• Collaborate with internal teams managed security providers and vendors to improve detection escalation response automation and overall security operations
• Identify opportunities to improve automate orchestrate and scale security processes and controls as the technology environment business operations and threat landscape evolve

• Lead or materially support response to moderate-to-complex security incidents and investigations including coordination of containment remediation recovery and evidence preservation
• Document investigation timelines evidence findings impact actions taken root cause and lessons learned for review by leadership Legal HR Compliance or audit
• Immediately escalate high-severity business-critical or time-sensitive incidents and maintain clear communications through closure

• Support vulnerability and exposure management by validating risk prioritizing remediation coordinating with system owners and verifying closure of high-risk vulnerabilities and control gaps
• Support security assessments remediation workflows penetration testing control validation and related evidence collection
• Evaluate the effectiveness of security controls across enterprise technologies and drive documented exceptions or deficiencies toward resolution

• Investigate identity access data SaaS and cloud security anomalies across enterprise platforms and security technologies
• Support identity governance privileged access access reviews authentication controls and account lifecycle management
• Apply identity-centric least-privilege and Zero Trust principles when supporting security controls and technology decisions
• Monitor and respond to security events involving confidential sensitive or regulated information including PHI PII and PCI data

• Collect validate organize and retain security evidence supporting regulatory contractual audit customer and internal assurance activities
• Support security risk assessments third-party and vendor security reviews and remediation tracking communicating findings in clear business-risk terms
• Maintain repeatable procedures playbooks investigation records evidence packages and control documentation that support consistent auditable security operations

• Support the investigation of and response to user-reported security concerns phishing impersonation and other human-targeted threats
• Support security awareness activities simulations metrics trend analysis and follow-up actions designed to reduce user-related risk

• Own assigned work through completion proactively research issues engage appropriate resources and escalate blockers or risks in a timely manner
• Balance incident-response priorities with recurring operational responsibilities and deadlines in a fast-paced environment
• Provide concise outcome-based updates covering completed work current risk blockers decisions needed and next steps
• Provide guidance and mentoring to team members in security operations investigations evidence collection documentation and repeatable procedures
• Participate in after-hours incident response or escalation support when required by business need
• Provide security support for new technologies integrations acquisitions and business initiatives including identifying security considerations and helping implement appropriate controls

Qualifications:

• Associate degree in Information Technology Cybersecurity Computer Science or a related field (equivalent relevant experience may be considered)
• 3-5 years of relevant cybersecurity operations SOC incident response security engineering support or similar experience
• Strong incident-response investigation and evidence-handling skills with the ability to independently manage moderate-complexity security events
• Strong working knowledge of SIEM/SOC operations EDR email security identity security cloud security and data-security monitoring
• Ability to perform advanced log analysis and correlate events across endpoint identity email network SaaS and cloud telemetry
• Working knowledge of Microsoft 365 Entra ID Windows security networking concepts authentication protocols and common attacker techniques
• Working knowledge of cloud and SaaS security concepts least privilege and Zero Trust principles
• Familiarity with vulnerability management patch/remediation workflows CVE/CVSS CISA KEV and risk-based prioritization
• Working knowledge of healthcare data-security considerations including PHI/HIPAA and PCI-related requirements
• Familiarity with security automation orchestration and scripting concepts including PowerShell
• Knowledge of AI fundamentals including generative AI concepts appropriate enterprise use data protection security risks and responsible use of AI-enabled tools
• Ability to create clear repeatable SOPs investigation notes executive summaries and audit-ready evidence
• Ability to communicate technical risk clearly to technical teams leadership and non-technical stakeholders
• Demonstrated ownership initiative sound judgment and ability to prioritize competing responsibilities in a fast-paced distributed environment
  

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants only those who are selected for an interview will be contacted.

Required Experience:

Manager