Security Analyst

Salary: $85,000–$100,000 annually Employment Type: Non-Exempt Reports Directly To: Chief Information Security Officer (CISO) Build Your Cybersecurity Career Directly Alongside a CISO Are you looking to take the next step in your cybersecurity career and gain exposure to the full spectrum of information security? This is an opportunity to join the Information Security team of a highly respected, nationally recognized law firm where security is critical to protecting sensitive client information, confidential business data, and the technology that supports a sophisticated professional-services environment. What makes this opportunity particularly compelling is who you will report to . This position reports directly to the Chief Information Security Officer , providing an exceptional opportunity to work closely with a senior security leader, learn how an enterprise security program operates, and develop experience across security operations, incident response, vulnerability management, risk, security awareness, and security technology. This is not a role where you'll be confined to one narrow area of cybersecurity. You'll have the opportunity to build broad, practical security experience while working alongside experienced IT and security professionals. A Great Opportunity for Someone Ready to Grow We are intentionally open to candidates at different points in their cybersecurity journey. You may already have security analyst experience, or you may be an IT professional looking to make the transition into cybersecurity. Candidates with backgrounds in IT support, systems administration, networking, infrastructure, or other technical disciplines are encouraged to apply if they have a strong interest in security and understand fundamental security concepts. If you're curious, analytical, service-oriented, and eager to learn, this role can provide the hands‑on exposure and mentorship needed to take your career to the next level. What You'll Do Security Operations & Monitoring Monitor security alerts, logs, dashboards, and SIEM platforms to identify suspicious activity and potential threats. Perform initial triage of security events, **escalate** appropriately, and clearly document actions taken. Assist with security audits and verification of security controls. Support access reviews and investigate potentially inappropriate access to applications, file shares, and collaboration tools. Support the incident response lifecycle, including identification, containment, eradication, recovery, and post-incident documentation. Assist with investigating malware alerts, phishing reports, suspicious logins, and other potential security events. Work with IT teams to coordinate remediation and resolution. Monitor emerging vulnerabilities and threats affecting law firms and professional‑services organizations. Participate in post‑incident reviews and help identify opportunities to strengthen security controls and procedures. Vulnerability, Risk & Third-Party Security Assist with vulnerability scanning, validation, remediation tracking, and reporting. Support vendor and third‑party cybersecurity assessments and maintain related documentation. Help respond to client security questionnaires and audits by gathering evidence and accurately describing security controls. Apply fundamental risk‑management principles to help prioritize findings and recommend practical improvements. Security Technology & Automation Support the implementation and ongoing maintenance of security technologies, including endpoint protection, MFA, email security, and SIEM platforms. Assist with automation and integration of security platforms using scripting or workflow tools. Help test and evaluate new security technologies and updates. Maintain clear documentation, configurations, procedures, and security playbooks. Security Awareness & Business Partnership Support monthly security awareness initiatives, including phishing campaigns and related training. Help educate employees on secure solutions and best practices. Partner with IT and business teams to address security needs in a professional, service‑oriented manner. Contribute to security policies, standards, and guidelines designed for both technical and non‑technical audiences. Participate in cross‑functional security and technology projects. What We're Looking For 2+ years of experience in information security or related technical experience, such as IT support/help desk, systems administration, networking, SOC experience, internships, or relevant academic projects. Working understanding of fundamental security concepts, including phishing, MFA, least privilege, patching, and logging. Basic understanding of TCP/IP and common networking concepts. Ability to follow established procedures and runbooks, document work clearly, and exercise good judgment when escalating issues. Strong customer‑service mindset and professional communication skills, particularly when working with attorneys and business professionals. High degree of discretion and sensitivity when handling confidential and client‑related information. Ability to work on‑site in the Los Angeles office three days per week. Must be available to assist during a significant security incident and bring the firm‑provided laptop during vacation when required for major security incidents. Must be able to successfully complete a background investigation. Preferred Basic scripting or automation experience, such as PowerShell or Python. Familiarity with Azure and/or AWS environments. Understanding of identity and access management concepts. Knowledge of ITIL or service‑management principles. Familiarity with Power BI. Hands‑on exposure to one or more of the following: SIEM platforms such as Microsoft Sentinel or Splunk Vulnerability management tools such as Tenable or Rapid7 Firewalls such as Fortinet or Palo Alto Endpoint protection technologies Email security platforms CompTIA Security+ or equivalent certification. CISSP certification or progress toward certification. Cloud security certifications such as AZ-500 or AWS Security Specialty. Education & Experience A bachelor's degree in Information Security, Computer Science, Engineering, or a related discipline is preferred, but equivalent practical experience will be considered. Why This Opportunity? Direct exposure to senior security leadership. Reporting directly to the CISO means you'll have an opportunity to learn from an experienced security leader and gain visibility into how security decisions are made at the enterprise level. Broad cybersecurity exposure. You'll work across security operations, incident response, vulnerability management, risk, third‑party security, awareness, and security technology rather than being limited to one function. A chance to grow. This position is designed for someone who wants to continue developing. Whether you're an early‑career security professional or an IT professional making the move into cybersecurity, you'll have the opportunity to expand your technical knowledge and take on increasing responsibility. #J-18808-Ljbffr