Analyst II Information Security

• Partner with Information Security Infrastructure and Application Development teams to strengthen enterprise security controls and capabilities.
• Participate in security operations activities including monitoring investigation and response to potential security incidents.
• Conduct vulnerability assessments analyze findings and support remediation efforts across technology environments.
• Assist in the development implementation and maintenance of security policies standards procedures and response plans.
• Perform information security risk assessments and provide recommendations to reduce organizational risk.
• Support identity and access management processes access reviews and privilege management initiatives.
• Validate application security testing results and collaborate with development teams to promote secure coding practices.
• Evaluate emerging cybersecurity threats vulnerabilities and industry trends to recommend appropriate safeguards and mitigation strategies.
• Provide security consultation and guidance to systems administrators technology teams and business stakeholders.
• Develop meaningful security metrics dashboards and reports to communicate risk and program effectiveness to leadership.
• Participate in enterprise security projects audits compliance initiatives and continuous improvement efforts.
• Help educate and train employees on cybersecurity awareness and security best practices.

• Work across nearly every area of Information Security gaining exposure to multiple cybersecurity disciplines.
• Collaborate with infrastructure cloud networking identity and application development teams.
• Contribute to enterprise-wide security initiatives that directly impact organizational risk and resilience.
• Gain hands-on experience with security technologies investigations risk management and governance activities.
• Join a team that values continuous learning innovation and professional development.

• Monitor analyze and investigate security events alerts and suspicious activity across enterprise systems and networks.
• Support incident response activities including triage investigation containment documentation and post-incident analysis.
• Assist in developing maintaining and improving enterprise information security policies standards procedures and response plans.
• Perform security risk assessments and provide actionable recommendations to mitigate identified risks.
• Conduct vulnerability management activities including scanning validation reporting prioritization and remediation tracking.
• Review security logs alerts and intelligence sources to identify threats vulnerabilities and potential indicators of compromise.
• Collaborate with security team members system administrators and application developers to address security concerns and implement controls.
• Assist with implementing validating and documenting security-related changes across enterprise technology environments.
• Support application security initiatives through testing validation secure coding reviews and collaboration with development teams.
• Develop and deliver security metrics status reports and presentations for management and stakeholders.
• Research emerging cybersecurity threats vulnerabilities technologies and industry best practices to improve organizational defenses.
• Provide consultation and security guidance to technology teams regarding infrastructure cloud applications and data protection.
• Maintain confidentiality integrity and professionalism while handling security-sensitive information and investigations.
• Support cybersecurity awareness education and training initiatives across the organization.
• Participate in audits compliance assessments and enterprise security improvement initiatives as assigned.

Minimum Requirements

• Bachelors degree in Information Systems Computer Science Cybersecurity Business or a related field.
• Five (5) years of progressive experience in information security cybersecurity systems administration infrastructure security or related technology disciplines.
• Demonstrated knowledge of cybersecurity principles technologies controls and best practices.
• Strong analytical problem-solving and investigative skills.
• Excellent written and verbal communication skills including the ability to communicate technical concepts to both technical and non-technical audiences.
• Ability to prioritize and manage multiple projects and initiatives in a dynamic environment.
• Valid drivers license required.

• Security GSEC GCIH CySA CISSP CASP or comparable cybersecurity certifications preferred.
• Experience working with:
  • Vulnerability management platforms
  • Security Information and Event Management (SIEM) tools
  • Endpoint Detection and Response (EDR) solutions
  • Identity and Access Management (IAM) technologies
  • Cloud security platforms and controls
  • Application security testing tools
• Familiarity with security frameworks and standards such as NIST Cybersecurity Framework CIS Controls ISO 27001 or similar.
• Knowledge of incident response methodologies threat hunting and security operations practices.

This position is based at ALSACs National Executive Office in Memphis TN and is eligible for a hybrid work schedule.