IT Security Analyst Jobs
IT Security Analyst jobs are open across finance, healthcare, government, defense, and technology, from entry-level to senior and architect roles, with specializations in cloud security, threat intelligence, and compliance. Find a role that fits from the openings below and apply directly.
Find IT Security Analyst JobsOverview
Showing 5 of 95+ IT Security Analyst jobs
JOB DESCRIPTION:
The IT Security Analyst II is responsible for monitoring, analyzing, and remediating security threats across the organization's IT environment. This role supports day-to-day security operations while also taking ownership of recurring security processes, incident investigation, control administration, compliance documentation, and security improvement initiatives. The analyst will work closely with IT, the Security Operations Center (SOC), business stakeholders, and external partners to strengthen email security, endpoint protection, identity and access management, cloud productivity platform security, security awareness, and audit readiness.
PRIMARY RESPONSIBILITIES:
- Monitor, triage, and investigate reported phishing attempts, suspicious emails, account activity, endpoint events, and other user-reported or system-generated security incidents; coordinate containment, remediation, and escalation as required.
- Review and analyze alerts from SOC services, SIEM platforms, endpoint protection tools, identity systems, Microsoft 365 security controls, and threat intelligence sources; identify trends, false positives, recurring risks, and opportunities for improved detection.
- Tune and maintain email security controls, including spam, phishing, impersonation, and malware filtering; recommend and implement rule changes to reduce risk while minimizing business disruption.
- Administer phishing simulation campaigns, security awareness training, user follow-up, and reporting; partner with IT and business leaders to improve user resilience against social engineering threats.
- Administer and support endpoint protection, internet security, zero-trust desktop controls, and related security platforms; assist with configuration reviews, exception handling, policy updates, and troubleshooting.
- Monitor Microsoft 365 user account security, email activity, conditional access signals, risky sign-ins, and related security posture indicators; support remediation of compromised or high-risk accounts.
- Support vulnerability management and security hygiene activities by reviewing findings, coordinating remediation with IT teams, validating corrective actions, and documenting risk exceptions where appropriate.
- Maintain ISMS records, evidence repositories, control documentation, incident records, and audit support materials for ISO 27001 and other compliance or customer-driven security requirements.
- Participate in incident response activities, risk assessments, tabletop exercises, process improvement initiatives, and security projects; contribute practical recommendations that reduce operational risk and improve security maturity.
- Prepare recurring metrics, status updates, and management-level summaries related to security incidents, user awareness, control effectiveness, compliance activities, and open remediation items.
- Provide security guidance to IT staff and non-technical users, balancing risk reduction with business continuity and practical user support.
Health, Safety, and Environmental Responsibilities:
All employees are responsible for supporting Audubon Companies' Health, Safety, and Environmental (HSE) policies and procedures. This includes:
- Performing duties in a manner that protects personal and team health and safety
- Participating in required HSE training, meetings, and reporting activities
- Identifying and reporting hazards, near misses, and unsafe conditions
- Following safe work practices and complying with applicable regulatory requirements
EXPERIENCE AND SKILL REQUIREMENTS:
- Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field, or equivalent combination of education, training, and experience.
- Three to five years of experience in IT security, cybersecurity operations, infrastructure security, identity administration, incident response, or a closely related IT role.
- Hands-on experience with security tools and platforms such as SIEM, endpoint detection and response, endpoint protection, email security, identity and access management, vulnerability management, and Microsoft 365 security administration.
- Working knowledge of phishing analysis, incident triage, endpoint investigation, identity-related threats, cloud productivity platform security, and common attack techniques.
- Experience administering or supporting Okta, Microsoft 365, endpoint protection, internet security, and zero-trust or conditional access controls preferred.
- Understanding of ISMS practices, security policies, risk management, audit evidence collection, and compliance frameworks such as ISO 27001.
- Ability to analyze security events, document findings clearly, prioritize risk-based remediation activities, and communicate practical recommendations to technical and non-technical audiences.
- Strong written and verbal communication skills in English; Spanish proficiency is a plus but is not required.
- Ability to work independently, manage recurring security responsibilities, collaborate across teams, and support occasional after-hours incident response or planned security activities when business needs require.
- Relevant certifications such as CompTIA Security+, CySA+, SSCP, GSEC, CISSP, CISM, or Microsoft security certifications are preferred.
No Recruiters, please!
Equal Opportunity Employer/Veterans/Disabled
JOB DESCRIPTION:
The IT Security Analyst II is responsible for monitoring, analyzing, and remediating security threats across the organization's IT environment. This role supports day-to-day security operations while also taking ownership of recurring security processes, incident investigation, control administration, compliance documentation, and security improvement initiatives. The analyst will work closely with IT, the Security Operations Center (SOC), business stakeholders, and external partners to strengthen email security, endpoint protection, identity and access management, cloud productivity platform security, security awareness, and audit readiness.
PRIMARY RESPONSIBILITIES:
- Monitor, triage, and investigate reported phishing attempts, suspicious emails, account activity, endpoint events, and other user-reported or system-generated security incidents; coordinate containment, remediation, and escalation as required.
- Review and analyze alerts from SOC services, SIEM platforms, endpoint protection tools, identity systems, Microsoft 365 security controls, and threat intelligence sources; identify trends, false positives, recurring risks, and opportunities for improved detection.
- Tune and maintain email security controls, including spam, phishing, impersonation, and malware filtering; recommend and implement rule changes to reduce risk while minimizing business disruption.
- Administer phishing simulation campaigns, security awareness training, user follow-up, and reporting; partner with IT and business leaders to improve user resilience against social engineering threats.
- Administer and support endpoint protection, internet security, zero-trust desktop controls, and related security platforms; assist with configuration reviews, exception handling, policy updates, and troubleshooting.
- Monitor Microsoft 365 user account security, email activity, conditional access signals, risky sign-ins, and related security posture indicators; support remediation of compromised or high-risk accounts.
- Support vulnerability management and security hygiene activities by reviewing findings, coordinating remediation with IT teams, validating corrective actions, and documenting risk exceptions where appropriate.
- Maintain ISMS records, evidence repositories, control documentation, incident records, and audit support materials for ISO 27001 and other compliance or customer-driven security requirements.
- Participate in incident response activities, risk assessments, tabletop exercises, process improvement initiatives, and security projects; contribute practical recommendations that reduce operational risk and improve security maturity.
- Prepare recurring metrics, status updates, and management-level summaries related to security incidents, user awareness, control effectiveness, compliance activities, and open remediation items.
- Provide security guidance to IT staff and non-technical users, balancing risk reduction with business continuity and practical user support.
Health, Safety, and Environmental Responsibilities:
All employees are responsible for supporting Audubon Companies' Health, Safety, and Environmental (HSE) policies and procedures. This includes:
- Performing duties in a manner that protects personal and team health and safety
- Participating in required HSE training, meetings, and reporting activities
- Identifying and reporting hazards, near misses, and unsafe conditions
- Following safe work practices and complying with applicable regulatory requirements
EXPERIENCE AND SKILL REQUIREMENTS:
- Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field, or equivalent combination of education, training, and experience.
- Three to five years of experience in IT security, cybersecurity operations, infrastructure security, identity administration, incident response, or a closely related IT role.
- Hands-on experience with security tools and platforms such as SIEM, endpoint detection and response, endpoint protection, email security, identity and access management, vulnerability management, and Microsoft 365 security administration.
- Working knowledge of phishing analysis, incident triage, endpoint investigation, identity-related threats, cloud productivity platform security, and common attack techniques.
- Experience administering or supporting Okta, Microsoft 365, endpoint protection, internet security, and zero-trust or conditional access controls preferred.
- Understanding of ISMS practices, security policies, risk management, audit evidence collection, and compliance frameworks such as ISO 27001.
- Ability to analyze security events, document findings clearly, prioritize risk-based remediation activities, and communicate practical recommendations to technical and non-technical audiences.
- Strong written and verbal communication skills in English; Spanish proficiency is a plus but is not required.
- Ability to work independently, manage recurring security responsibilities, collaborate across teams, and support occasional after-hours incident response or planned security activities when business needs require.
- Relevant certifications such as CompTIA Security+, CySA+, SSCP, GSEC, CISSP, CISM, or Microsoft security certifications are preferred.
No Recruiters, please!
Equal Opportunity Employer/Veterans/Disabled
See All 95+ IT Security Analyst Jobs
Jump back to the full list of openings and apply to any IT security analyst role that fits.
Find IT Security Analyst JobsIT Security Analyst Job Market
A snapshot from current openings nationwide, updated as new roles post.
Who's Hiring
- Tata Consultancy Services (TCS)4
- Artech2
- Collabera2
- Fidelity Investments2
- First Hawaiian Bank2
Top Industries Hiring
- Technology & Software31
- Banking & Financial Services12
- Consulting & Professional Services12
- Education7
- Investment & Asset Management6
What Employers Look For
The qualifications that appear most often in IT security analyst jobs.
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field
- Proficiency with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- Industry certification such as CompTIA Security+, CISSP, CEH, or CISM
- Experience conducting vulnerability assessments and penetration testing
- Knowledge of compliance frameworks including NIST, ISO 27001, SOC 2, or HIPAA
- Familiarity with cloud security environments including AWS, Azure, or Google Cloud
Tips for Your IT Security Analyst Job Search
Tailor your resume to each framework
Hiring managers scan for specific frameworks like NIST, ISO 27001, or SOC 2. Pull the exact framework names from each job posting and mirror them in your resume's skills and experience sections so your application clears automated screening.
List certifications above your job titles
For it security analyst roles, certifications like Security+, CISSP, CEH, or CISM carry more immediate weight than degree names. Place them in a dedicated section near the top of your resume, not buried in education.
Target openings by clearance level required
Government and defense postings often require an active Secret or Top Secret clearance, which cuts competition sharply if you already hold one. Filter for clearance-required roles early, since these openings close faster and hiring moves quicker.
Apply early to roles that fit
Migrate Mate lists it security analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a hands-on technical scenario answer
Interviewers routinely ask how you would respond to a specific incident, like a phishing campaign or a privilege escalation alert. Prepare two or three concrete examples from past work or labs that walk through your detection and containment steps.
Negotiate using scope, not just title
When discussing offers, ask about the size of the environment you will protect, the tools budget, and whether the role includes incident response duties. These factors signal growth potential and justify countering on total compensation, not base salary alone.
IT Security Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most it security analysts?
The companies hiring the most it security analysts right now include Tata Consultancy Services (TCS), Artech, and Collabera, with the largest share of openings in Texas, New York, and Georgia, based on current listings on Migrate Mate as of June 2026. Defense contractors, financial institutions, and large health systems consistently maintain the highest sustained demand for this role.
How many it security analyst jobs are remote?
About 25% of it security analyst openings are fully remote or hybrid as of June 2026, though roles requiring government clearance or hands-on network access are far less likely to allow remote work. Cloud security, threat intelligence, and compliance-focused positions tend to offer the most remote flexibility across the field.
How do you become an it security analyst?
Start by earning a degree in cybersecurity, information technology, or a related field, or complete a recognized cybersecurity bootcamp with hands-on lab components. Earn an entry-level certification like CompTIA Security+ to validate foundational knowledge. Build practical experience through internships, a home lab, or a helpdesk or IT support role, then apply for junior analyst positions that emphasize monitoring and incident response.
Can you get hired as an it security analyst with little experience?
Yes, entry-level it security analyst roles exist, and employers filling them prioritize certifications and demonstrated hands-on skills over years of experience. Building a home lab to practice log analysis, setting up a SIEM, and documenting that work publicly gives you concrete talking points. Roles focused on security operations center monitoring are the most accessible starting point for candidates without extensive professional history.
What does the it security analyst interview process look like?
Most it security analyst interviews include an initial recruiter screen, a technical phone interview covering core concepts like the CIA triad, incident response steps, and common attack vectors, and a final round with scenario-based questions where you walk through how you would handle a specific threat. Some employers add a practical assessment, such as analyzing a sample log file or identifying vulnerabilities in a test environment, before extending an offer.
Where can I find and apply to it security analyst jobs?
You can find and apply to it security analyst jobs on Migrate Mate, which lists current openings from employers across the United States. Search the available roles, find the ones that match your experience and specialization, and apply directly to each listing from the page.
See All 95+ IT Security Analyst Jobs
Jump back to the full list of openings and apply to any IT security analyst role that fits.
Find IT Security Analyst Jobs