IT Security Analyst Jobs
IT Security Analyst jobs are open across finance, healthcare, government, defense, and technology, from entry-level to senior and architect roles, with specializations in cloud security, threat intelligence, and compliance. Find a role that fits from the openings below and apply directly.
Find IT Security Analyst JobsOverview
Showing 5 of 71+ IT Security Analyst jobs
TITLE
Senior Information Security Analyst
JOB SUMMARY
The Senior Information Security Analyst is responsible for analyzing and assessing the university’s information systems, policies, processes and procedures to identify gaps and weaknesses, and develop appropriate remediations to operate more securely, efficiently, and effectively. This position will work collaboratively with university stakeholders to implement new processes and procedures, and advocate for adoption of security best practices. Additionally, the Senior Information Security Analyst will act as a liaison between university stakeholders to coordinate compliance audits, policy changes, conduct university assessments and lead the security awareness and training efforts.
As a member of the IT Solutions (ITS) team, the Senior Information Security Analyst is expected to uphold the division’s mission to “empower an agile, digital university and elevate technology as a strategic institutional asset” and contribute positively to a collaborative, human-centered, innovative, accountable, transparent, and inclusive culture within ITS.
ORGANIZATIONAL RELATIONSHIPS
Reports to: Associate Director, Information Security
Supervises: No supervisory responsibilities
ESSENTIAL DUTIES - May include, but not limited to the following:
Information Security Analysis & Management (60%)
Uses cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity. Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
Examines the university’s enterprise architecture and systems to understand criticality and data flows, and identify security control improvements to reduce the risk of exposure and vulnerable attack surface.
Creates, reviews, and maintains information security policy documentation consistent with university policies, Texas Administrative Code 202, and other state, federal, and industry-specific regulations and requirements.
Works collaboratively with ITS and functional area subject matter experts to validate events, alerts, triage security incidents, and to identify areas for new or updated IT policies and/or awareness training.
Coordinates with the university's Compliance Officer on information security policy and/or policy compliance matters.
Regularly audits the organization for compliance based on the defined administrative and operational requirements and escalates exceptions.
Suggests overall security improvements by assessing current situations, evaluating trends, and anticipating requirements.
Project manages the requirements gathering, design, development, implementation and delivery of security-related technologies and process improvements.
Serves as the project lead for security remediation work identified as a result of internal or external audits, penetration testing, or other assessment.
Provides high quality and timely IT security support, including responding to incident/problem tickets and troubleshooting errors and issues related to overall cybersecurity.
Assessment & Support (30%)
Performs and maintains risk assessments on information security and data protection requirements for new software, systems or cloud-hosted services requests.
Participates in assessments and audits to determine compliance with regulatory or university requirements, such as TAC 202, PCI, HIPAA, etc.
Actively participates in the development and delivery of the information security training and awareness campaigns, as needed.
Provides substantive content for the development of reports and briefings on policy, strategy, and audit/assessment activities.
Keeps ITS leadership informed by preparing performance reports and communicating system status.
ADDITIONAL DUTIES
Participation & Support (10%)
Maintains awareness of current practices and future trends in information and cyber security technology and best practices, as well as of state, federal, and industry-specific security regulations and requirements.
Represents IT Solutions and participates in the campus community by serving on working groups, project teams, and university committees.
Performs other duties as requested.
EDUCATION
Bachelor’s degree required. Additional job-related experience may substitute for the required education on a year-for-year basis.
EXPERIENCE
Five years of relevant experience information and/or cyber security. CompTIA Security+ certification and/or other security or project management certifications, desirable. Additional job-related education may substitute for the required experience on a year-for-year basis.
Additional/Desirable Skills & Abilities
Knowledge of MITRE ATT&CK and SHIELD frameworks.
Knowledge of an information security framework like ISO27001, NIST 800-53, or NIST 800-171.
CompTIA Security+ certification, SSCP, CISSP, CISA
Professional project management and/or IT certifications, such as PMP, ITIL, Six Sigma, agile.
Experience in enterprise security document creation.
Experience in delivering employee security awareness training.
Experience in a higher education setting.
Experience with implementing security controls in accordance with Texas Administrative Code (TAC 202).
Ability to maintain the security and integrity of the infrastructure.
Understanding of the theories, principles, practices, methods, and techniques used in the field of information security.
Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Ability to develop and maintain project plans.
Ability to manage small to medium sized projects, system enhancements impacting information security.
Ability to collect and utilize data (e.g. indicators of compromise) from a variety of cyber defense resources.
Ability to recognize and categorize types of vulnerabilities and associated attacks.
Skill in writing and reviewing information security policies and procedures.
Knowledge of Information Technology auditing process and remediations.
Strong written and oral communication skills (including ability to present ideas in user-friendly, business-friendly and technical language) and interpersonal skills with a focus on rapport-building, listening and questioning skills.
Proven analytical and problem-solving abilities, including ability to anticipate, identify, and solve critical problems.
Ability to build effective relationships and strong commitment to working collegially and collaboratively with constituents at all levels in a diverse and distributed environment.
Knowledge of Texas Administrative Code (TAC 202) requirements.
Ability to use a personal computer and other office equipment, including related university software and email.
REQUIREMENT
Regular and reliable attendance at the University during regular scheduled days and work hours is an essential function of this position.
Work is performed under general supervision and performance is based on the effective completion of assignments and results obtained. The performance evaluation is conducted through the performance evaluation system and in accordance with the University Policies & Procedures.
All employees share the responsibility of maintaining information security and privacy requirements within the university by adhering to Federal and State regulations, and TWU Policies & Procedures.
KNOWLEDGE, SKILLS, AND ABILITIES - The following are essential:
Ability to maintain the security and integrity of the infrastructure.
Understanding of the theories, principles, practices, methods, and techniques used in the field of information security.
Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Ability to develop and maintain project plans.
Ability to manage small to medium sized projects, system enhancements impacting information security.
Ability to collect and utilize data (e.g. indicators of compromise) from a variety of cyber defense resources.
Ability to recognize and categorize types of vulnerabilities and associated attacks.
Skill in writing and reviewing information security policies and procedures.
Knowledge of Information Technology auditing process and remediations.
Strong written and oral communication skills (including ability to present ideas in user-friendly, business-friendly and technical language) and interpersonal skills with a focus on rapport-building, listening and questioning skills.
Proven analytical and problem-solving abilities, including ability to anticipate, identify, and solve critical problems.
Ability to build effective relationships and strong commitment to working collegially and collaboratively with constituents at all levels in a diverse and distributed environment.
Knowledge of Texas Administrative Code (TAC 202) requirements.
Ability to use a personal computer and other office equipment, including related university software and email.
PHYSICAL DEMANDS
The physical demands described in the Essential Duties and below are representative of those that must be met by an employee to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.
The employee may be required to travel. The employee may be required to work evenings, weekends, and holidays.
WORK ENVIRONMENT
SAFETY
TWU promotes a safe working environment. Employees are responsible for completing assigned tasks safely and efficiently, and supervisors are responsible for creating and maintaining a safe work environment. Employees must report any unsafe work conditions or practices, as well as any near-miss incidents, to their supervisor and Risk Management. Supervisors and employees should ensure that injury/accident reports are submitted to the Office of Human Resources and Risk Management within 24 hours of the incident.
Texas Woman’s University, an AA/EEO employer, provides equal opportunity to all employees and applicants for employment and prohibits discrimination on the basis of race, color, national origin, religion, gender, age, disability, veteran status, sexual orientation, or any other legally protected category, class or characteristic.
All offers of employment will be contingent on the candidate’s ability to provide documents which establish proof of identity and eligibility to work in the United States. Positions at Texas Woman’s University deemed security-sensitive require background checks and verification of all academic credentials.
If you are a male between the age of 18 and 25, federal law requires that you must be registered with the U.S. Selective Service System, unless you meet certain exemptions under Selective Service law. Under HB 558, enacted by the 76th Texas State Legislature, if you are currently of the age and gender requiring registration with Selective Service, but knowingly and willfully fail to do so, you are ineligible for employment with an agency in any branch of Texas state government. For additional information regarding registration or status, you can contact the Selective Service System at 847-688-6888 or www.sss.gov .
Additional information about the University is available at http://www.twu.edu
TITLE
Senior Information Security Analyst
JOB SUMMARY
The Senior Information Security Analyst is responsible for analyzing and assessing the university’s information systems, policies, processes and procedures to identify gaps and weaknesses, and develop appropriate remediations to operate more securely, efficiently, and effectively. This position will work collaboratively with university stakeholders to implement new processes and procedures, and advocate for adoption of security best practices. Additionally, the Senior Information Security Analyst will act as a liaison between university stakeholders to coordinate compliance audits, policy changes, conduct university assessments and lead the security awareness and training efforts.
As a member of the IT Solutions (ITS) team, the Senior Information Security Analyst is expected to uphold the division’s mission to “empower an agile, digital university and elevate technology as a strategic institutional asset” and contribute positively to a collaborative, human-centered, innovative, accountable, transparent, and inclusive culture within ITS.
ORGANIZATIONAL RELATIONSHIPS
Reports to: Associate Director, Information Security
Supervises: No supervisory responsibilities
ESSENTIAL DUTIES - May include, but not limited to the following:
Information Security Analysis & Management (60%)
Uses cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity. Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
Examines the university’s enterprise architecture and systems to understand criticality and data flows, and identify security control improvements to reduce the risk of exposure and vulnerable attack surface.
Creates, reviews, and maintains information security policy documentation consistent with university policies, Texas Administrative Code 202, and other state, federal, and industry-specific regulations and requirements.
Works collaboratively with ITS and functional area subject matter experts to validate events, alerts, triage security incidents, and to identify areas for new or updated IT policies and/or awareness training.
Coordinates with the university's Compliance Officer on information security policy and/or policy compliance matters.
Regularly audits the organization for compliance based on the defined administrative and operational requirements and escalates exceptions.
Suggests overall security improvements by assessing current situations, evaluating trends, and anticipating requirements.
Project manages the requirements gathering, design, development, implementation and delivery of security-related technologies and process improvements.
Serves as the project lead for security remediation work identified as a result of internal or external audits, penetration testing, or other assessment.
Provides high quality and timely IT security support, including responding to incident/problem tickets and troubleshooting errors and issues related to overall cybersecurity.
Assessment & Support (30%)
Performs and maintains risk assessments on information security and data protection requirements for new software, systems or cloud-hosted services requests.
Participates in assessments and audits to determine compliance with regulatory or university requirements, such as TAC 202, PCI, HIPAA, etc.
Actively participates in the development and delivery of the information security training and awareness campaigns, as needed.
Provides substantive content for the development of reports and briefings on policy, strategy, and audit/assessment activities.
Keeps ITS leadership informed by preparing performance reports and communicating system status.
ADDITIONAL DUTIES
Participation & Support (10%)
Maintains awareness of current practices and future trends in information and cyber security technology and best practices, as well as of state, federal, and industry-specific security regulations and requirements.
Represents IT Solutions and participates in the campus community by serving on working groups, project teams, and university committees.
Performs other duties as requested.
EDUCATION
Bachelor’s degree required. Additional job-related experience may substitute for the required education on a year-for-year basis.
EXPERIENCE
Five years of relevant experience information and/or cyber security. CompTIA Security+ certification and/or other security or project management certifications, desirable. Additional job-related education may substitute for the required experience on a year-for-year basis.
Additional/Desirable Skills & Abilities
Knowledge of MITRE ATT&CK and SHIELD frameworks.
Knowledge of an information security framework like ISO27001, NIST 800-53, or NIST 800-171.
CompTIA Security+ certification, SSCP, CISSP, CISA
Professional project management and/or IT certifications, such as PMP, ITIL, Six Sigma, agile.
Experience in enterprise security document creation.
Experience in delivering employee security awareness training.
Experience in a higher education setting.
Experience with implementing security controls in accordance with Texas Administrative Code (TAC 202).
Ability to maintain the security and integrity of the infrastructure.
Understanding of the theories, principles, practices, methods, and techniques used in the field of information security.
Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Ability to develop and maintain project plans.
Ability to manage small to medium sized projects, system enhancements impacting information security.
Ability to collect and utilize data (e.g. indicators of compromise) from a variety of cyber defense resources.
Ability to recognize and categorize types of vulnerabilities and associated attacks.
Skill in writing and reviewing information security policies and procedures.
Knowledge of Information Technology auditing process and remediations.
Strong written and oral communication skills (including ability to present ideas in user-friendly, business-friendly and technical language) and interpersonal skills with a focus on rapport-building, listening and questioning skills.
Proven analytical and problem-solving abilities, including ability to anticipate, identify, and solve critical problems.
Ability to build effective relationships and strong commitment to working collegially and collaboratively with constituents at all levels in a diverse and distributed environment.
Knowledge of Texas Administrative Code (TAC 202) requirements.
Ability to use a personal computer and other office equipment, including related university software and email.
REQUIREMENT
Regular and reliable attendance at the University during regular scheduled days and work hours is an essential function of this position.
Work is performed under general supervision and performance is based on the effective completion of assignments and results obtained. The performance evaluation is conducted through the performance evaluation system and in accordance with the University Policies & Procedures.
All employees share the responsibility of maintaining information security and privacy requirements within the university by adhering to Federal and State regulations, and TWU Policies & Procedures.
KNOWLEDGE, SKILLS, AND ABILITIES - The following are essential:
Ability to maintain the security and integrity of the infrastructure.
Understanding of the theories, principles, practices, methods, and techniques used in the field of information security.
Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Ability to develop and maintain project plans.
Ability to manage small to medium sized projects, system enhancements impacting information security.
Ability to collect and utilize data (e.g. indicators of compromise) from a variety of cyber defense resources.
Ability to recognize and categorize types of vulnerabilities and associated attacks.
Skill in writing and reviewing information security policies and procedures.
Knowledge of Information Technology auditing process and remediations.
Strong written and oral communication skills (including ability to present ideas in user-friendly, business-friendly and technical language) and interpersonal skills with a focus on rapport-building, listening and questioning skills.
Proven analytical and problem-solving abilities, including ability to anticipate, identify, and solve critical problems.
Ability to build effective relationships and strong commitment to working collegially and collaboratively with constituents at all levels in a diverse and distributed environment.
Knowledge of Texas Administrative Code (TAC 202) requirements.
Ability to use a personal computer and other office equipment, including related university software and email.
PHYSICAL DEMANDS
The physical demands described in the Essential Duties and below are representative of those that must be met by an employee to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.
The employee may be required to travel. The employee may be required to work evenings, weekends, and holidays.
WORK ENVIRONMENT
SAFETY
TWU promotes a safe working environment. Employees are responsible for completing assigned tasks safely and efficiently, and supervisors are responsible for creating and maintaining a safe work environment. Employees must report any unsafe work conditions or practices, as well as any near-miss incidents, to their supervisor and Risk Management. Supervisors and employees should ensure that injury/accident reports are submitted to the Office of Human Resources and Risk Management within 24 hours of the incident.
Texas Woman’s University, an AA/EEO employer, provides equal opportunity to all employees and applicants for employment and prohibits discrimination on the basis of race, color, national origin, religion, gender, age, disability, veteran status, sexual orientation, or any other legally protected category, class or characteristic.
All offers of employment will be contingent on the candidate’s ability to provide documents which establish proof of identity and eligibility to work in the United States. Positions at Texas Woman’s University deemed security-sensitive require background checks and verification of all academic credentials.
If you are a male between the age of 18 and 25, federal law requires that you must be registered with the U.S. Selective Service System, unless you meet certain exemptions under Selective Service law. Under HB 558, enacted by the 76th Texas State Legislature, if you are currently of the age and gender requiring registration with Selective Service, but knowingly and willfully fail to do so, you are ineligible for employment with an agency in any branch of Texas state government. For additional information regarding registration or status, you can contact the Selective Service System at 847-688-6888 or www.sss.gov .
Additional information about the University is available at http://www.twu.edu
IT Security Analyst Jobs by Experience Level
See All 71 IT Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Security Analyst JobsIT Security Analyst Job Market
Who's Hiring
Top Industries Hiring
- Education
What Employers Look For
The qualifications that appear most often in IT security analyst jobs.
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field
- Proficiency with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- Industry certification such as CompTIA Security+, CISSP, CEH, or CISM
- Experience conducting vulnerability assessments and penetration testing
- Knowledge of compliance frameworks including NIST, ISO 27001, SOC 2, or HIPAA
- Familiarity with cloud security environments including AWS, Azure, or Google Cloud
Tips for Your IT Security Analyst Job Search
Tailor your resume to each framework
Hiring managers scan for specific frameworks like NIST, ISO 27001, or SOC 2. Pull the exact framework names from each job posting and mirror them in your resume's skills and experience sections so your application clears automated screening.
List certifications above your job titles
For it security analyst roles, certifications like Security+, CISSP, CEH, or CISM carry more immediate weight than degree names. Place them in a dedicated section near the top of your resume, not buried in education.
Target openings by clearance level required
Government and defense postings often require an active Secret or Top Secret clearance, which cuts competition sharply if you already hold one. Filter for clearance-required roles early, since these openings close faster and hiring moves quicker.
Apply early to roles that fit
Migrate Mate lists it security analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a hands-on technical scenario answer
Interviewers routinely ask how you would respond to a specific incident, like a phishing campaign or a privilege escalation alert. Prepare two or three concrete examples from past work or labs that walk through your detection and containment steps.
Negotiate using scope, not just title
When discussing offers, ask about the size of the environment you will protect, the tools budget, and whether the role includes incident response duties. These factors signal growth potential and justify countering on total compensation, not base salary alone.
IT Security Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most it security analysts?
The companies hiring the most it security analysts right now include August Schell, Georgia Farm Bureau, and Computer World Services, with the largest share of openings in Texas, Florida, and Virginia, based on current listings on Migrate Mate as of November 2026. Defense contractors, financial institutions, and large health systems consistently maintain the highest sustained demand for this role.
How many it security analyst jobs are remote?
About 71% of it security analyst openings are fully remote or hybrid as of November 2026, though roles requiring government clearance or hands-on network access are far less likely to allow remote work. Cloud security, threat intelligence, and compliance-focused positions tend to offer the most remote flexibility across the field.
How do you become an it security analyst?
Start by earning a degree in cybersecurity, information technology, or a related field, or complete a recognized cybersecurity bootcamp with hands-on lab components. Earn an entry-level certification like CompTIA Security+ to validate foundational knowledge. Build practical experience through internships, a home lab, or a helpdesk or IT support role, then apply for junior analyst positions that emphasize monitoring and incident response.
Can you get hired as an it security analyst with little experience?
Yes, entry-level it security analyst roles exist, and employers filling them prioritize certifications and demonstrated hands-on skills over years of experience. Building a home lab to practice log analysis, setting up a SIEM, and documenting that work publicly gives you concrete talking points. Roles focused on security operations center monitoring are the most accessible starting point for candidates without extensive professional history.
What does the it security analyst interview process look like?
Most it security analyst interviews include an initial recruiter screen, a technical phone interview covering core concepts like the CIA triad, incident response steps, and common attack vectors, and a final round with scenario-based questions where you walk through how you would handle a specific threat. Some employers add a practical assessment, such as analyzing a sample log file or identifying vulnerabilities in a test environment, before extending an offer.
Where can I find and apply to it security analyst jobs?
You can find and apply to it security analyst jobs on Migrate Mate, which lists current openings from employers across the United States. Search the available roles, find the ones that match your experience and specialization, and apply directly to each listing from the page.
See All 71 IT Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Security Analyst Jobs