IT Security Analyst

IT Security Analyst

The Baltimore Orioles organization is a storied Major League Baseball franchise with a proud tradition, passionate fans, and a deep connection to Baltimore. Under new leadership, the team is entering an exciting chapter focused on building a winning tradition, delivering a world-class fan experience, fostering innovation, and making a meaningful impact in our community. We are seeking an IT Security Analyst responsible for protecting and strengthening the organization's IT infrastructure while serving as a key liaison between IT Security and the business. This role focuses on risk identification and mitigation through business impact assessments, security awareness initiatives, and the implementation of technical and procedural controls, with an emphasis on business continuity and disaster recovery for the Baltimore Orioles organization. Responsibilities include monitoring, investigating, and responding to security threats across the organization. The ideal candidate has hands-on experience with a variety of industry standard tools with a strong understanding of IT infrastructure, excellent analytical and communication skills, and a service-oriented mindset. The candidate will also assist with escalated issue resolution by providing in-person hands-on support to end users as needed.

Key Responsibilities

• Support the development and testing of business continuity and disaster recovery plans, including coordinating and documenting tabletop exercises and assisting with staff training to ensure readiness during disruptive events.
• Conduct risk assessments and business impact analyses for assigned business areas to identify potential threats and operational impacts.
• Monitor security alerts and events using SIEM platforms and endpoint detection tools, escalating incidents as appropriate.
• Investigate and respond to security incidents such as phishing attempts, malware infections, and unauthorized access, following established incident response procedures.
• Analyze logs from network, endpoint, and identity systems to identify indicators of suspicious or malicious activity.
• Participate in threat hunting activities and proactive vulnerability assessments and work with IT to remediate identified risks.
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks.
• Generate routine reports on security events, trends, and operational metrics for internal stakeholders.
• Support collaboration between technical teams and business stakeholders by helping translate security requirements into practical, business-friendly guidance.
• Research emerging cybersecurity technologies and assist in evaluating third-party security tools and vendors to support business needs.
• Work with third-party vendors under guidance to support integrations, issue resolution, and service delivery.
• Provide helpdesk coverage and respond to escalated user issues as required, including participation in scheduled after-hours on-call support.
• Stay current on emerging threats, vulnerabilities, and security best practices to continuously develop skills and improve the organization's security posture.
• Provide IT Manager on Duty coverage, both on site and remote on call, on a rotating shared basis to cover defined hours of operation which will include events and games.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or information security roles.
• Strong analytical thinking, and the ability to spot patterns and trends.
• Ability to work independently and as part of a team.
• Familiarity with business continuity, risk assessment, and disaster recovery frameworks such as NIST, ISO27001, SOC2.
• Proficiency in documentation and process development.
• Understanding of how IT and security can enable business operations.
• Technical skillset to configure security tools and systems.
• Knowledge of IT infrastructure concepts.
• Self-motivation and accountability for ensuring service levels are achieved/exceeded.
• Flexible schedule with some travel required.

Work Environment

• This is an on-site role with requirements to be present during home games and other key events; the primary work location is Oriole Park at Camden Yards.
• Some lifting of IT equipment and hands-on troubleshooting in various ballpark locations is required.

The statements herein are intended to describe the general nature and level of work being performed by the employee in this position. The duties listed do not represent an exhaustive list of all responsibilities, duties, and skills required of a person in this position.

The Baltimore Orioles are an Equal Opportunity Employer. It is the policy of the Baltimore Orioles to ensure equal employment opportunity without discrimination or harassment on the basis of race (including hair textures, afro hairstyles, or protective hairstyles), color, national origin or ancestry, religion or creed, gender or sex (including pregnancy), age, disability, citizenship status, marital status, veteran's status, genetic predisposition or carrier status, gender identity, sexual orientation, or any other characteristic protected by law. The anticipated salary for this role is $90,000-$100,000 annually depending on experience, plus bonus opportunity. The Baltimore Orioles are committed to providing competitive pay and benefits for our employees. The Baltimore Orioles provide generous benefits, including unlimited PTO, paid holidays, paid sick leave, health insurance (single and family), vision and dental coverage, life insurance, 401(k) plan with discretionary employer match, concession/merchandise discounts, free parking and complimentary baseball tickets to home games. This information is being provided in accordance with the Maryland Equal Pay for Equal Work - Wage Range Transparency law.