Information Security Analyst

Salary: $68,000 - 108,000 per year Requirements:

• We hold a bachelors degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or bring equivalent relevant experience.
• We have three to five years of experience in security operations, cloud security, infrastructure security, or a similar function.
• We are hands-on with investigating alerts across endpoint, identity, email, network, cloud, and data security controls.
• We have experience with vulnerability assessment, remediation tracking, patch management, incident response, and validating security controls.
• We understand data discovery, classification, data loss prevention, sensitive information handling, and insider-risk concepts.
• We can communicate technical findings, business impact, and recommended actions to technical and non-technical audiences.
• We demonstrate strong judgment, discretion, documentation skills, analytical thinking, and the ability to manage multiple priorities.
• Preferred: We have experience in a regulated environment and familiarity with frameworks such as NIST, MITRE ATT&CK, SOC 2, or HITRUST.
• Preferred: We have experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications.
• Preferred: We have working knowledge of cloud security, identity governance, and hybrid infrastructure.
• Preferred: We are familiar with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration.
• Preferred: We have experience with scripting or security analytics using PowerShell, query languages, or similar automation methods.
• Preferred: We hold relevant industry or cloud security certifications.

• We monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity.
• We triage and investigate alerts, document findings, and coordinate containment, remediation, recovery, and post-incident follow-up.
• We analyze event, identity, endpoint, cloud, application, and network logs to separate security incidents from expected activity and false positives.
• We maintain incident response plans, investigation procedures, escalation paths, and case documentation.
• We assess and strengthen security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity.
• We administer identity and access controls, including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes.
• We support Zero Trust and secure access services for private applications.
• We partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services.
• We operate data security posture management capabilities to identify sensitive data, excessive access, shadow data, orphaned files, and insecure sharing.
• We administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories.
• We support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information.
• We administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting.
• We support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines.
• We coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads, and prioritize remediation through patching.
• We assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements.
• We monitor security systems, including firewalls and intrusion detection systems, to detect and respond to incidents in a timely manner.
• We collaborate on operating system, application, firmware, and security patching, validate remediation, and document accepted exceptions.
• We support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements.
• We maintain policies, standards, procedures, diagrams, and inventories.
• We contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations.
• We evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents.
• We partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that support responsible use of generative AI, AI agents, automation, and machine-to-machine services.
• We contribute to our AI Risk Management Framework program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews.

• AI
• AI Agents
• Cloud
• Firmware
• Support
• Mobile
• Network
• PowerShell
• Security
• Web

More:

We are Cobalt Benefits Group, seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. Our team works closely with IT Operations, infrastructure, and application teams in a regulated environment, with a focus on strengthening our ability to prevent, detect, and respond to cybersecurity risk. This role offers exposure across multiple security domains, including cloud, identity, endpoint, network, data protection, resilience, governance, and AI security. Compensation is listed as 00 Yearly Salary.

last updated 39 week of 2026