field_job_employment_type

field_job_occupational_field_parents_all

field_job_experience

job_organization_name

city

state

<h3>Job Description</h3>
Job DescriptionAppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

The Information Security Analyst will focus on detecting, investigating, and responding to account takeovers (ATO) and other security threats across AppFolio’s platforms. This role involves identifying early indicators of compromise, triaging anomalous behavior, and analyzing attacker patterns related to credential misuse, session hijacking, and social engineering. The analyst will collaborate closely with the security, fraud, risk, and engineering teams to investigate suspicious activity, reduce time to containment, and protect user accounts from unauthorized access.

Your impact&nbsp;
<ul>
<li>Monitor security alerts and events to detect, investigate, and respond to cybersecurity incidents in real-time.</li>
<li>Investigate suspected Account Takeover (ATO) cases by analyzing authentication logs, user behavior, device intelligence, and related signals across AppFolio’s platform.</li>
<li>Identify, contain, and remediate fraudulent activity associated with compromised accounts to minimize customer impact.</li>
<li>Collaborate closely with customer support, fraud, and engineering teams to triage reports, escalate critical threats, and support impacted users.</li>
<li>Develop detection logic and alerting mechanisms that identify early indicators of ATO attempts using SIEM, identity platforms, and threat intelligence.</li>
<li>Perform root cause analysis of account compromises and contribute to process improvements to prevent recurrence.</li>
<li>Build and maintain investigation runbooks, documentation, and workflows specific to ATO detection, response, and customer notification.</li>
<li>Analyze emerging attack trends targeting SaaS authentication flows, such as phishing, session hijacking, and token theft, to evolve defenses.</li>
<li>Contribute to internal training and knowledge sharing around ATO patterns, prevention, and investigative techniques.</li>
</ul>
Qualifications&nbsp;
<ul>
<li>Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent practical experience.</li>
<li>3-5 years of experience in incident response, fraud investigation, or security operations with a focus on user or application security.</li>
<li>Hands-on experience with identity and access management systems (e.g., Okta, Duo, or similar).</li>
<li>Experience investigating ATOs or credential-based threats using logs from SIEM, IAM, and behavioral analytics platforms. Familiarity with common ATO tactics (e.g., credential stuffing, phishing, session reuse) and the MITRE ATT&amp;CK framework.</li>
<li>Strong analytical skills with the ability to recognize subtle patterns across disparate data sources. Proficiency in log analysis and querying tools (e.g., Splunk, Snowflake) to investigate activity and develop detections.</li>
<li>Ability to work independently and cross-functionally in a fast-paced, customer-impacting environment.</li>
<li>Excellent verbal and written communications skills</li>
</ul>

Nice to have
<ul>
<li>Experience building detections for ATO or fraud-related activity in a SaaS environment.</li>
<li>Familiarity with fraud signals such as IP reputation, device fingerprinting, geolocation anomalies, and behavioral risk scoring.</li>
<li>Cyber Security certifications such as GIAC GCIH, GCFA, GCFE, or AWS Security Specialty.</li>
<li>Understanding of OAuth, SAML, and session management in web and mobile applications.</li>
<li>Experience working with customer support, fraud, and legal teams in the context of user-impacting security events.</li>
</ul>

LocationFind out more about our locations by visiting our site.&nbsp;Compensation &amp; BenefitsThe compensation that we reasonably expect to pay for this role is: $94,400 - $118,000 base pay. The actual compensation for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, and internal equity.
Please note that compensation is just one aspect of a comprehensive Total Rewards package. The compensation range listed here does not include additional benefits or any discretionary bonuses you may be eligible for based on your role and/or employment type. Regular full-time employees are eligible for benefits - see here.
&nbsp;#LI-KB1

Information Security Analyst

<h3>Job Description</h3>
Job Description
Job Title: Information Security Analyst
This position is an on-site assignment (preferred).
 
Summary:
The Information Security (IS) Analyst is responsible for protecting the bank's digital assets and infrastructure (including cloud infrastructure) from cyber threats and managing information security risks in alignment with industry standards and regulatory expectations. This role involves monitoring systems, analyzing security incidents, conducting risk assessments, assisting with executing Identity &amp; Access Management (IAM) processes, and ensuring compliance with regulatory requirements. The IS Analyst also assists with establishing sound governance functions and ensuring internal controls are operating effectively. 
Wage Type: Salaried 
Essential Duties &amp; Responsibilities:
To perform this job successfully, an individual must be able to perform each of the essential duties satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
<ul>
<li>Monitor and analyze security alerts from tools such as SIEM, IDS/IPS, DLP, and endpoint protection systems. </li>
<li>Investigate and respond to cybersecurity incidents, including root cause analysis and remediation. </li>
<li>Conduct vulnerability assessments and penetration testing; lead efforts to recommend mitigation strategies and ensure remediation plans are executed timely. </li>
<li>Support Secure Development Lifecycle (SDLC) processes and ensure secure development processes are imbedded and enforced throughout the SDLC.</li>
<li>Manage processes for securing the bank's cloud infrastructure, with a focus on Microsoft Azure and AWS.</li>
<li>Monitor emerging (or changes to) regulatory requirements, threats, and industry trends, advising leadership on necessary changes and improvements Generate reports and metrics for management and regulatory bodies.</li>
<li>Maintain and update IS policies, procedures, and standards in alignment with industry frameworks (i.e., NIST CSF 2.0) and regulatory requirements (FFIEC, GLBA, etc.).</li>
<li>Develop and maintain security documentation, playbooks, and training materials.</li>
<li>Manage and monitor security awareness, education, and training to employees.</li>
<li>Perform internal and vendor IS risk assessments (including data privacy and other regulatory risk assessments). Lead remediation efforts of control gaps identified. </li>
<li>Assist in the management and testing of the bank's Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) to ensure operational resiliency and rapid recovery in case of disruptions.</li>
<li>Support centralized IAM governance and daily processing of access requests and provisioning.</li>
<li>Manage IS metrics monitoring and reporting; Prepare reports and dashboards to communicate compliance performance to senior management and stakeholders; Monitor and report on the status of risk remediation activities.</li>
<li>Support audits, inspections, and reviews conducted by regulators and external parties.</li>
<li>Carries out responsibilities in a manner consistent with our values and operating principles, in accordance with policy and applicable laws, and with a commitment to commitment to continuous improvement and process excellence.</li>
<li>Any other duties as assigned.</li>
</ul>
 
Key Deliverables:
<ul>
<li>Satisfactory audit results and regulatory examinations.</li>
<li>Timeliness and accuracy of risk assessments and reporting.</li>
<li>Satisfactory and timely resolution of compliance incidents.</li>
</ul>
 
Organizational Structure:
Reports to: Director of Information Security
Supervises: NA
 
Qualifications:
Education:
<ul>
<li>Bachelor's degree in Business Administration, Finance, Risk Management, Law, or a related field.</li>
<li>Certifications such as CRISC, CISA, CISM, CISSP, or equivalent are preferred.</li>
</ul>
Required Knowledge/Skills:
<ul>
<li>2-4 years of experience in an IS or cybersecurity role, preferably in the banking or financial services sector.</li>
<li>Familiarity with banking regulations, Interagency Information Security Standards and cyber security frameworks (e.g., NIST 2.0 CSF/RMF, PCI DSS, FFIEC, FDIC part 364 Appendix B, GDPR, etc.).</li>
<li>Strong technical aptitude with Microsoft Azure and AWS Cloud Infrastructure with experience managing cloud security tools (i.e. Sentinel, Defender, Purview, AWS Security Hub and other native security tools, etc.)</li>
<li>Strong analytical and problem-solving skills.</li>
<li>Knowledge of risk assessment methodologies and compliance frameworks.</li>
<li>Ability to manage multiple priorities and work collaboratively in a team environment.</li>
</ul>
Talents:
 
<ul>
<li>Proactive and analytical professional with a strong understanding of regulatory compliance in the banking sector.</li>
<li>Strong positivity.</li>
<li>Mission driven, competitive, goal oriented, and motivated to develop themselves and others.</li>
<li>Energetic, resourceful, and appropriate work intensity to get the work done </li>
<li>Strong people acumen and relationship skills; Naturally pre-disposed to quickly establish positive personal and professional relationships.</li>
</ul>
Other:
<ul>
<li>Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.</li>
<li>Must be able to lift to 20 pounds.</li>
</ul>
TransPecos Banks will not accept unsolicited resumes from any source other than the candidate. We will consider any candidate for whom an Agency submits an unsolicited resume, to have been referred to us by the Agency free of any charges or fees, other than those agencies we engage on a specific search. TransPecos Banks will not pay a fee for any placement resulting from the receipt of an unsolicited resume.

<h3>Job Description</h3>
Job DescriptionDescription:
This position is contingent upon successful contract award.
 
Prevailance is seeking a highly skilled Senior Information Security Analyst to support the planning, design, implementation, operation, and reporting of cybersecurity systems across complex network environments. This role requires deep experience with the DoD Risk Management Framework (RMF), system accreditation processes, cyber incident response, and vulnerability management. The ideal candidate brings strong technical expertise, the ability to interpret and action tasking orders, and the capability to train and mentor military personnel on cybersecurity best practices. 
 
Responsibilities include, but not limited to:
<ul>
<li>Support planning, design, implementation, and operation of cybersecurity systems and architectures</li>
<li>Manage RMF accreditation processes for new and existing systems, using service-level RMF tools</li>
<li>Identify, track, and resolve cybersecurity vulnerabilities across networked systems and platforms</li>
<li>Review network security configurations and assess system health and compliance status</li>
<li>Monitor systems, activate remote terminals, and support resolution of cybersecurity incidents</li>
<li>Receive, interpret, and respond to Cyber Tasking Orders (CCTOs), enterprise OpDirs, and other cybersecurity directives</li>
<li>Support development and maintenance of cybersecurity diagrams, including system-level and operational-level views</li>
<li>Execute robust change management processes and maintain configuration documentation</li>
<li>Train military personnel in cybersecurity processes, best practices, and unit training requirements</li>
<li>Assist in developing and executing cybersecurity training and education programs</li>
<li>Provide subject matter expertise on vulnerability remediation, risk management, and cyber readiness reporting</li>
</ul>
Requirements:
Qualifications:
<ul>
<li>5–8 years of experience in cybersecurity system planning, design, implementation, operation, reporting, and RMF accreditation</li>
<li>Experience identifying, tracking, and resolving vulnerabilities across networked systems</li>
</ul>
Desired Qualifications:
<ul>
<li>Senior-level cybersecurity and defensive cyber operations experience</li>
<li>Skilled in accrediting systems using service RMF tools and managing lifecycle compliance</li>
<li>Capable of interpreting and responding to CCTOs and OpDirs and managing incident resolution workflows</li>
<li>Proficient in reviewing network security settings and monitoring system health</li>
<li>Ability to train military personnel and support cybersecurity education initiatives</li>
<li>Capable of producing system-level cybersecurity diagrams and maintaining change control documentation</li>
<li>Strong analytical, documentation, and communication skills</li>
</ul>
Education:
<ul>
<li>Bachelor’s degree (BA/BS)</li>
<li>DoD IAT Level II or higher certification (e.g., Security+, CISSP, CASP+)</li>
<li>Security+ plus Cybersecurity Workforce Master Certification also meets the requirement</li>
</ul>
Clearance:
<ul>
<li>Possesses Top Secret Clearance (SCI preferred)</li>
<li>Secret may be acceptable depending on mission needs</li>
</ul>
If you meet these qualifications and are ready to make an impact, we encourage you to apply today! 
Prevailance, Inc. proudly supports veterans as a member of the V3 (Virginia Values Veterans) program and the Hire Vets initiative. Recognized as a Top Workplace in 2025, Prevailance fosters a supportive, mission-driven environment for its team members. We provide a comprehensive benefits package to eligible employees, designed to support health, wellness, and financial security. Our benefits include:
<ul>
<li>Medical Insurance</li>
<li>TriCare Supplemental</li>
<li>Dental Insurance</li>
<li>Vision Insurance</li>
<li>Life &amp; Accidental Death &amp; Dismemberment (AD&amp;D) Coverage</li>
<li>401(k) Plan with Company Matching Contributions</li>
<li>Paid Time Off (PTO)</li>
<li>11 Paid Holidays</li>
<li>Education Reimbursement Program</li>
<li>Computing Device Reimbursement Program</li>
</ul>
Prevailance, Inc. is an Equal Opportunity/Affirmative Action Employer. All qualified candidates will receive consideration for employment and will not be discriminated against based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, pregnancy, genetic information, citizenship status, marital status or any other consideration prohibited by law or contract. Prevailance, Inc. participates in E-Verify and is VEVRAA Compliant.

Senior Information Security Analyst

<h3>Job Description</h3>
Job Description
Job Title: Information Security Analyst 
Status: Full Time
Location: Wood River, IL
Salary: $60,000 -$72,000
Benefit Information: <a href="https://www.1stmidamerica.org/docs/default-source/pdfs/benefits-summary-at-a-glance-2026.pdf" target="_blank">https://www.1stmidamerica.org/docs/default-source/pdfs/benefits-summary…</a>
About Us: 
1st MidAmerica is a trusted financial institution dedicated to providing exceptional service to our members. We pride ourselves on our commitment to the communities we serve and our focus on delivering an array of financial products for each step in their financial journey. We are currently seeking motivated and member-oriented individuals to join our team as an Information Security Analyst.
Job Summary: 
We are seeking an Information Security Analyst to assist in the development, implementation, monitoring and reporting of Information Security programs that protect member and organizational data. Ensures all appropriate regulatory and industry measures are taken to limit the risk of loss, theft, or unauthorized access to sensitive information. Promote security awareness programs throughout the credit union and supports compliance with all applicable federal and state regulations, including GLBA, FFIEC, and NCUA guidance. 
Key Responsibilities: 
- Threat and Vulnerability Management
- Security Monitoring and Incident Response
- Governance, Risk, and Compliance 
- Third Party/Vendor Risk Management 
- Conducts and promotes Security Awareness and Training 
- Business Continuity and Disaster Recovery Support
- Metrics and Reporting 
Qualifications: 
- 3-5 years experience directly related to information security, cybersecurity operations, or GRC (Governance, Risk, Compliance) 
- Bachelor’s degree in information technology, computer science, or related field. 
- Preferred certifications include CompTIA Security+, CySA+, SSCP, or GSEC. Advanced certifications such as CISM or CISSP are desirable.
Other Skills Preferred:
- Applied knowledge of GLBA, FFIEC, PCI DSS and NIST CSF frameworks.
- Active work in data loss prevention principles.
- Practical experience with risk assessment, data protection, and incident response. - Applied experience working with key third-party tools including CrowdStrike, NodeZero (Horizon3), Zscaler, KnowBe4, and NinjaOne Patch Management or comparable tools. - Ability to analyze system vulnerabilities, recommend controls, and drive remediation. - Proficiency in managing vendor risk assessments and understanding SOC 2 and PCI reports.
What We Offer: 
- Competitive salary and benefits. 
- Opportunities for career growth. 
- Supportive team environment. 
Schedule:
- Monday – Friday 8:00 AM – 5:00 PM 
Disclaimer: Must be able to work and travel to different credit union locations as determined by management.
1st MidAmerica is an Equal Opportunity Employer.

<h3>Job Description</h3>
Job Description
CoAd Summary:
CoAdvantage is a leading human resource solutions provider for small to mid-sized companies. We are HR experts who partner with small businesses nationwide to administer payroll, benefits, workers’ compensation and core HR management. Headquartered in Bradenton, Florida, CoAdvantage has offices throughout Florida, Georgia, Alabama, Texas, Oklahoma, Colorado, California, North Carolina, New Jersey and New York, and serves more than 100,000 worksite employees in all 50 states. We’re looking for the best professionals in our markets who are interested in building a successful and rewarding career and be part of a focused, energetic team dedicated to delivering excellence to America’s small business owners.
Position Summary: 
The IT Security Analyst participates in the execution and monitoring of IT Security related activities that safeguard the company's information and technology assets. Primary responsibilities include participating in the development of new, and the operation of existing IT Security programs, procedure development and standards documentation. Ensures the appropriate information security access controls are in place and applied consistently.
<ul>
<li>Review daily and periodic data to identify, report, and remedy vulnerabilities. </li>
<li>Document, prioritize, and analyze security threats, incidents and key metrics.</li>
<li>Knowledge of information security principles, including risk assessment and management, Cyber security defenses, threat and vulnerability management, incident response, application security, and identity and access management.</li>
<li>Identifies, researches, and resolves technical problems that arise within enterprise security applications and tools. Manage vendor relationship for enterprise security applications and tools.</li>
<li>Respond to SSAE18 requests and other questionnaires. Audit vendor and remote sites for physical and logical security.</li>
<li>Participate in breach investigations and provide subject matter expertise for an effective investigation.</li>
</ul>
Essential Job Functions:
<ul>
<li>Identify, plan, develop and implement automation of routine tasks</li>
<li>Remediate issues occurring with any IT security systems including but not limited to unexplained system outages, cyber security incidents, issues with data collection feeds or interfaces the day-to-day administration of information security tools and devices, alert response and analysis for security incident response actions. Perform forensic research and images as needed</li>
<li>Update information security metrics</li>
<li>Assist in documenting and updating information security standards and procedures</li>
<li>Assess information systems and company processes are safe and secure for information handling</li>
<li>Recommends, tests, schedules and implements upgrades and patches that may affect enterprise as well as the enterprise security applications and the servers they reside on</li>
<li>Given the confidentiality needs of this role, the highest levels of personal integrity, professionalism, judgment, and maturity are expected</li>
<li>Participates in special projects and performs other duties as assigned</li>
</ul>
Required Skills and Experience:
<ul>
<li>4 year Degree in Technology or Business or equivalent combination of relevant experience, education and training</li>
<li>2-4 years in the IT security field preferred</li>
<li>Strong background in maintaining operational computer security and application security, scripting languages (primarily PowerShell), and Active Directory</li>
<li>Working knowledge of but not limited to: API, application security, IPS, network monitoring tools, antivirus, identity management and user provisioning, risk assessments, audits, security testing and auditing, security intrusion detection, security maintenance, and security policy</li>
<li>Strong working knowledge of relevant laws, regulation, and standards relating to information security, including HIPAA, HITRUST, ISO 27001, NIST, PCI-DSS, etc</li>
<li>Preferred Information Security certifications such as Security+, CISSP, GPEN, etc. or other industry -specific certifications such as Microsoft or Cisco</li>
<li>Passion for customer service and problem solving</li>
<li>Ability to prioritize and balance multiple tasks</li>
</ul>
Continuous Improvement: Seeks efficiencies in daily work and projects; Brings new and creative suggestions to the table; Anticipates roadblocks, problems or obstacles in advance and creates or proposes solutions to overcome; Uses innovative strategies to continually improve the quality or output of work and/or generate executable business solutions; seeks to continually improve and develop skills
Communication: Seeks clarity; Asks questions to gain full understanding and is willing to ask for help; keeps management aware of project progress and shifting priorities; Willing to give feedback to others; communicates both cross functionally and upwards within the organization; uses professionalism in communication 
Accountability and Ownership: Exercises self-discipline; Accepts accountability for achievement of goals and objectives; Removes blame; Shows a personal commitment to the team and the function/role; Can demonstrate “upward accountability”; Takes ownership of issues and sees them through to completion
Results Driven Execution: Acts with a sense of urgency; Takes initiative on projects and in daily work; pushes to keep tasks on schedule and plans work; accordingly, addresses challenges appropriately to continue focusing on the end result
Collaboration and Team Oriented: Assumes the good intentions of others; Inclusive; Puts the needs and interest of the team first; Recognizes peers; Maintains positivity and encouragement; Has a deep commitment to the team and the objectives of all members; Is willing to step outside of his/her scope for the betterment of the broader organization.
 EOE
CoAdvantage is committed to providing equal employment opportunities to all employees and applicants without regard to race, color, religion, national origin, ancestry, citizenship status, age, sex (including pregnancy, childbirth, breast feeding and pregnancy-related medical conditions), gender, gender identity or expression, sexual orientation, marital status, uniform service member and veteran status, disability, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances.
#LI-HYBRID
 Powered by ExactHire:187834

<h3>Job Description</h3>
Job Description
Knowledge Management, Inc. (KMI) has the leadership and experience to deliver innovative technology, logistics and management solutions to meet real mission requirements. KMI is a Minority Business Enterprise (MBE) and Small Disadvantage Business (SDB) that specializes in Logistics, Warehouse Services, Distance Learning/Training, Enterprise Solutions, Financial Management Support, Program Management, Intelligence Analysis &amp; Threat Assessment, and Data Analytics/Operations Research. Since 1998, our solutions and services have helped our clients improve performance, drive cost and operational effectives, and map technology needs for tomorrow's requirements.
Title: Information Security Analyst
Location: Washington, DC (onsite)
Position: 1
Duration: Ongoing contract
Start Date: ASAP
Clearance Required: Minimum of a DOD Secret clearance
Employment Type: Full-time
Salary: $95,000-$105,000
The Information Security Analyst serves as a subject matter expert on PeopleSoft HCM 9.2 security and IAM workflow governance. This role manages complex access provisioning, ensures compliance with separation of duties, troubleshoots escalated access issues, and contributes to continuous improvement of security models and approval workflows. The analyst collaborates with Training, ISSOs, HR, DBAs, OAB, and functional stakeholders to ensure accurate and secure user access across domestic and overseas environments.
Responsibilities:
<ul>
<li>Maintain Security Access Control list to PROD, CPY, UAT, ASB, TRN, MHME, EAPS, EMS, and Kiteworks</li>
<li>Utilizes Security Tables, Security Trees, and RLS structures to administer and validate user access across enterprise environments. Performs SQL based troubleshooting and develops custom queries in PeopleSoft Query Manager to support audit controls, performance analysis, and issue resolution.</li>
<li>Maintain and enhance PeopleSoft security structures (roles, permission lists, row-level security) across environments.</li>
<li>Ensure access provisioning aligns with compliance and separation of duties.</li>
<li>Recommend and support improvements to IAM workflows and automation.</li>
<li>Oversee and resolve escalated access requests, ensuring proper routing and approval.</li>
<li>Validate user role eligibility in partnership with Training and business owners.</li>
<li>Maintain accuracy and traceability of access lifecycle records in ServiceNow.</li>
<li>Lead troubleshooting of complex access errors, workflow stoppages, and profile inconsistencies.</li>
<li>Partner with Tier II/III Functionals, DBAs, and OAB on environment and configuration issues.</li>
<li>Support environment refreshes by rebuilding internal user security profiles to maintain consistency.</li>
<li>Validate role and security behavior during PUM updates and deployment events.</li>
<li>Collaborate with ISSOs and leadership to align with security policies and operational standards.</li>
<li>Mentor team members and support documentation of access workflows and SOPs.</li>
</ul>
Required:
<ul>
<li>4+ years in HRIS security, IAM, enterprise system support, or information security.</li>
<li>Experience working in ServiceNow.</li>
<li>Experience with PeopleSoft HCM security or comparable enterprise access control models.</li>
<li>Strong analytical and troubleshooting skills.</li>
<li>Effective communication across technical and non-technical groups.</li>
</ul>
Preferred:
<ul>
<li>Experience supporting global or distributed users.</li>
<li>Experience with DoS GTM systems.</li>
<li>Familiarity with audit controls or IAM compliance frameworks.</li>
<li>Understanding of workflow automation and identity lifecycle management.</li>
</ul>
Benefits: All full-time employees are eligible to participate in our benefits programs:
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan</li>
<li>Paid time off (PTO) and holidays</li>
<li>Group Term Life and Accidental Death and Dismemberment Insurance</li>
<li>Voluntary Term Life Insurance</li>
<li>Short and Long-term disability insurance </li>
</ul>
Equal Employment Opportunity Statement. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
E-Verify Statement. Knowledge Management, Inc. participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, KMI is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9.
Pay Transparency Non-Discrimination Provision. Knowledge Management, Inc. will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
Disability Statement. If you have a disability and need reasonable accommodation or assistance at any point in the application or onboarding process, please email us at <a href="mailto:marie@knowledgemanagement.com" target="_blank">marie@knowledgemanagement.com</a>.

<h3>Job Description</h3>
Job Description
 
Information Security Analyst
Job Description

POSITION INFORMATION
Department
Security
Reports To
Information Security Manager
Work Location
Work Schedule
Position Type
Full-Time
Rate Type
Salary

Position SummaryWork as part of ESG’s Global Information Security Team to maintain the confidentiality, integrity, and availability of enterprise assets. The Security Analyst plays a critical role in supporting the organization's cybersecurity posture by monitoring, analyzing, and responding to security incidents and threats. This position requires a strong technical foundation, analytical thinking, and understanding of cyber security threats. Essential Functions
<ul>
<li>Analyze security alerts to identify and respond to any security events or incidents.</li>
<li>Support investigations, reporting and remediation activities of security events and incidents</li>
</ul>
<ul>
<li>Manage, create, and update information security documentation.</li>
<li>Provide support to ensure information security compliance with industry regulations and data privacy laws. </li>
<li>Keep up to date with the latest security trends and technologies and recommend improvements to our security posture.</li>
<li>Research the latest information security threats and vulnerabilities and prepare reports and presentations.</li>
<li>Conducting vulnerability assessments on systems and applications, to identify and mitigate any security vulnerabilities.</li>
<li>Participate in both internal and external audits.</li>
<li>Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously.</li>
<li>All other related duties as assigned.</li>
</ul>
Experience
<ul>
<li>Two years’ experience as a Security Analyst, or 2 years’ experience in a related technical field.</li>
<li>Knowledge of implementing, supporting, and auditing information security control frameworks such as, NIST, PCI DSS, ISO and SOC. </li>
<li>Knowledge of security Incident event management and monitoring</li>
<li>Supporting penetration testing and vulnerability management programs</li>
<li>Security threat monitoring</li>
<li>Strong communication skills with the ability to work collaboratively in a global team.</li>
<li>Detail oriented and ability to focus on granular level compliance and security issues.</li>
</ul>
 Education
Bachelor of Science in Computer Science or related field
Perks
By becoming a team member here at ESG, you’ll have access to competitive health, dental, and vision coverage, as well as life insurance, and short term and long-term disability insurance. We value work life balance, and you’ll benefit from our open time off and excellent 401K package. We also offer a generous paid parental leave and education assistance program.
Work Environment
This job operates in a hybrid work environment with a preference for being in the office two to three days a week. Full time remote can be considered for the right candidate and fit with the ESG North American operation.
Travel Requirements
Up to 5% travel may be required based on location.
ESG is an equal opportunity employer. Qualified candidates will receive consideration for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.

7,669 information-security-analyst Jobs