Security Analyst Jobs in Pennsylvania
Security Analyst jobs in Pennsylvania are in strong and steady demand, concentrated in financial services, healthcare, defense contracting, and state government IT, with openings at every level from entry-level analyst to senior security architect. Philadelphia, Pittsburgh, and Harrisburg are the primary hiring centers, where employers like Lockheed Martin, Jefferson Health, and PNC Financial Services maintain deep and ongoing security teams. The most sought-after specialties in Pennsylvania listings are cloud security, threat intelligence, and compliance-focused roles tied to HIPAA and federal regulatory frameworks. Find a role that fits below and apply directly.
Find Security Analyst JobsOverview
Showing 5 of 21+ Security Analyst jobs
Job Reporting Relationships
Supervised by: Network Services Manager
Supervises: N/A
Basic Qualifications
Education/Training:
Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field preferred, with strong knowledge of Microsoft Windows desktop and server operating systems. Working knowledge of network architecture, including LAN/WAN, firewalls, VPNs, and cloud environments. Familiarity with cybersecurity frameworks (NIST, ISO 27001, CIS, CRI). Relevant certifications preferred (e.g., Security+, CISSP, CISA, CEH) but not required.
Skill(s): Strong written and verbal communication skills; Knowledge of regulatory requirements (GLBA, FFIEC, PCI-DSS, etc.) preferred; Analytical and problem-solving abilities with attention to detail. Understanding of identity and user access management standards. Ability to assess risk and assist in making recommended mitigation strategies. Ability to work collaboratively with vendors and technical peers and management in a complex technology environment. Proven experience evaluating the data privacy risks of third-party generative AI platforms and establishing secure acceptable-use guardrails for corporate users.
Experience: Minimum of one (1) year of experience in information security, IT security operations, or related field preferred.
General Responsibilities
Supports the Bank’s Information Security Program by assisting in the development, implementation, and maintenance of security technology, security controls and processes designed to protect information systems, networks, and data. Ensures compliance with internal policies, regulatory requirements, and industry best practices through monitoring, analysis, reporting, and continuous improvement activities.
Essential Duties
Assist with the Bank’s Information Security functions by performing the following duties:
a. Security Software & Hardware Management: Deploy, configure, maintain, and patch security technologies—including endpoints, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM platforms, anti-malware/EDR tools, and data encryption solutions.
b. Testing and deploying critical security patches across servers, workstations, and network infrastructure to eliminate vulnerabilities without disrupting bank operations.
c. Reviewing alerts from the SIEM, firewall, and email security gateways (e.g., phishing filters) to distinguish between false positives and real threats.
d. Managing email security, authentication protocols (DKIM, SPF, DMARC) and spam/phishing filters to prevent fraud and business email compromise (BEC).
e. Manage Microsoft 365 Tenant, and email security gateway, data loss prevention and security controls.
f. Before turning on internal AI search tools, you must audit and clean up Active Directory and SharePoint permissions. (If a user has accidental access to HR or financial folders, the AI will surface that data to them).
g. Updating DLP policies with specific rules to detect, alert, and block financial data (SSNs, account numbers, routing numbers) or internal source code from being uploaded to external AI endpoints.
h. Securing the network pipelines and APIs that connect the bank’s databases to the AI models, ensuring all data in transit and at rest is strongly encrypted.
i. Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the computer systems and take care of these before an internal or external cyber-attack.
j. Monitoring and configuring system boundaries to prevent attackers from manipulating the AI’s output or extracting sensitive training data via malicious prompts.
k. Reviewing the SOC 2 reports and "AI governance policies" of third-party vendors to determine how they train their models, where the bank's data is stored, and if the data is used to train public models.
l. Audit internal AI tool usage and configure access controls to prevent the exposure of proprietary company data or customer PII.
m. Perform regular vulnerability scans, analyze system logs for anomalies or breach indicators, and participate in threat hunting and incident response activities.
n. Install, maintain, and upgrade software safeguards, including firewalls, data encryption programs, and anti-malware.
o. Investigate cyberattacks, assess the extent of the damage, and coordinate mitigation and recovery efforts.
p. Develop and enforce cybersecurity best practices, develop disaster recovery plans for security systems and services, and ensure compliance with industry’s best practices and privacy laws.
q. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
r. Conducting and documenting quarterly or annual user access reviews to ensure the "principle of least privilege" is maintained.
s. Maintaining standard operating procedures, asset lists and other documentation that support the Information Technology and Security program.
t. Participating in data collection and presentment during risk assessments and regulatory exams.
u. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
Continuously analyze network traffic, activity logs, and system alerts for anomalies, intrusion attempts, and breaches.
a. Execute assigned projects and work with vendors as directed, in oversight and support of the Physical and Information Security infrastructure and solutions.
b. Participate in training as required for the Bank to meet regulatory requirements, recommend and assist in training/retraining of employees in their responsibilities for Information Security Programs.
c. Remain current on Information Technology and Information security trends and assist in Bank compliance with all federal and state laws. Attain certifications as required for the organization to meet vendor guidelines.
d. Complete incident response reporting for security events within the technology infrastructure.
e. Adjust to changing priorities as directed by supervisors or senior management.
Abides by the current laws and organizational policies and procedures designed and implemented to promote an environment which is free of harassment and other forms of illegal discriminatory behavior in the workplace
Cooperates with, participates in, and supports the adherence to all internal policies, procedures, and practices in support of risk management and overall safety and soundness and the Bank's compliance with all regulatory requirements; works to ensure that assigned personnel adhere to the same.
Reports pertinent information to the immediate supervisor as requested, or according to an established schedule; compiles information as necessary or as directed and provides data to appropriate Bank personnel to integrate goals and activities.
Responds to inquiries relating to his/her area of responsibility, or to requests from other Bank personnel, within given time frames and within established policy.
Ancillary Duties
1. Perform tasks which are supportive in nature of the essential functions of the job, but which may be altered or re-designed depending upon individual circumstances.
Job Location
Support Center
1055 Texas Palmyra Highway
Honesdale, PA 18431
Various outside locations
Equipment/Machines
1. Automobile with Valid Driver’s License
2. Smartphone
3. Computer Equipment
Multi-Function Print Devices
Job Reporting Relationships
Supervised by: Network Services Manager
Supervises: N/A
Basic Qualifications
Education/Training:
Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field preferred, with strong knowledge of Microsoft Windows desktop and server operating systems. Working knowledge of network architecture, including LAN/WAN, firewalls, VPNs, and cloud environments. Familiarity with cybersecurity frameworks (NIST, ISO 27001, CIS, CRI). Relevant certifications preferred (e.g., Security+, CISSP, CISA, CEH) but not required.
Skill(s): Strong written and verbal communication skills; Knowledge of regulatory requirements (GLBA, FFIEC, PCI-DSS, etc.) preferred; Analytical and problem-solving abilities with attention to detail. Understanding of identity and user access management standards. Ability to assess risk and assist in making recommended mitigation strategies. Ability to work collaboratively with vendors and technical peers and management in a complex technology environment. Proven experience evaluating the data privacy risks of third-party generative AI platforms and establishing secure acceptable-use guardrails for corporate users.
Experience: Minimum of one (1) year of experience in information security, IT security operations, or related field preferred.
General Responsibilities
Supports the Bank’s Information Security Program by assisting in the development, implementation, and maintenance of security technology, security controls and processes designed to protect information systems, networks, and data. Ensures compliance with internal policies, regulatory requirements, and industry best practices through monitoring, analysis, reporting, and continuous improvement activities.
Essential Duties
Assist with the Bank’s Information Security functions by performing the following duties:
a. Security Software & Hardware Management: Deploy, configure, maintain, and patch security technologies—including endpoints, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM platforms, anti-malware/EDR tools, and data encryption solutions.
b. Testing and deploying critical security patches across servers, workstations, and network infrastructure to eliminate vulnerabilities without disrupting bank operations.
c. Reviewing alerts from the SIEM, firewall, and email security gateways (e.g., phishing filters) to distinguish between false positives and real threats.
d. Managing email security, authentication protocols (DKIM, SPF, DMARC) and spam/phishing filters to prevent fraud and business email compromise (BEC).
e. Manage Microsoft 365 Tenant, and email security gateway, data loss prevention and security controls.
f. Before turning on internal AI search tools, you must audit and clean up Active Directory and SharePoint permissions. (If a user has accidental access to HR or financial folders, the AI will surface that data to them).
g. Updating DLP policies with specific rules to detect, alert, and block financial data (SSNs, account numbers, routing numbers) or internal source code from being uploaded to external AI endpoints.
h. Securing the network pipelines and APIs that connect the bank’s databases to the AI models, ensuring all data in transit and at rest is strongly encrypted.
i. Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the computer systems and take care of these before an internal or external cyber-attack.
j. Monitoring and configuring system boundaries to prevent attackers from manipulating the AI’s output or extracting sensitive training data via malicious prompts.
k. Reviewing the SOC 2 reports and "AI governance policies" of third-party vendors to determine how they train their models, where the bank's data is stored, and if the data is used to train public models.
l. Audit internal AI tool usage and configure access controls to prevent the exposure of proprietary company data or customer PII.
m. Perform regular vulnerability scans, analyze system logs for anomalies or breach indicators, and participate in threat hunting and incident response activities.
n. Install, maintain, and upgrade software safeguards, including firewalls, data encryption programs, and anti-malware.
o. Investigate cyberattacks, assess the extent of the damage, and coordinate mitigation and recovery efforts.
p. Develop and enforce cybersecurity best practices, develop disaster recovery plans for security systems and services, and ensure compliance with industry’s best practices and privacy laws.
q. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
r. Conducting and documenting quarterly or annual user access reviews to ensure the "principle of least privilege" is maintained.
s. Maintaining standard operating procedures, asset lists and other documentation that support the Information Technology and Security program.
t. Participating in data collection and presentment during risk assessments and regulatory exams.
u. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
Continuously analyze network traffic, activity logs, and system alerts for anomalies, intrusion attempts, and breaches.
a. Execute assigned projects and work with vendors as directed, in oversight and support of the Physical and Information Security infrastructure and solutions.
b. Participate in training as required for the Bank to meet regulatory requirements, recommend and assist in training/retraining of employees in their responsibilities for Information Security Programs.
c. Remain current on Information Technology and Information security trends and assist in Bank compliance with all federal and state laws. Attain certifications as required for the organization to meet vendor guidelines.
d. Complete incident response reporting for security events within the technology infrastructure.
e. Adjust to changing priorities as directed by supervisors or senior management.
Abides by the current laws and organizational policies and procedures designed and implemented to promote an environment which is free of harassment and other forms of illegal discriminatory behavior in the workplace
Cooperates with, participates in, and supports the adherence to all internal policies, procedures, and practices in support of risk management and overall safety and soundness and the Bank's compliance with all regulatory requirements; works to ensure that assigned personnel adhere to the same.
Reports pertinent information to the immediate supervisor as requested, or according to an established schedule; compiles information as necessary or as directed and provides data to appropriate Bank personnel to integrate goals and activities.
Responds to inquiries relating to his/her area of responsibility, or to requests from other Bank personnel, within given time frames and within established policy.
Ancillary Duties
1. Perform tasks which are supportive in nature of the essential functions of the job, but which may be altered or re-designed depending upon individual circumstances.
Job Location
Support Center
1055 Texas Palmyra Highway
Honesdale, PA 18431
Various outside locations
Equipment/Machines
1. Automobile with Valid Driver’s License
2. Smartphone
3. Computer Equipment
Multi-Function Print Devices
See All 21 Security Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Security Analyst JobsSecurity Analyst Jobs by City in Pennsylvania
Where Pennsylvania roles are concentrated, by current openings.
Security Analyst Job Market in Pennsylvania
A snapshot from current Pennsylvania openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Education
- Science & Research
- Government & Public Sector
What Pennsylvania Employers Look For
The qualifications that appear most often in security analyst jobs across Pennsylvania.
- CompTIA Security+ or equivalent certification recognized by Pennsylvania employers
- Bachelor's degree in cybersecurity, information technology, or a related field
- Hands-on experience with SIEM platforms such as Splunk or Microsoft Sentinel
- Familiarity with NIST frameworks and federal or state regulatory compliance requirements
- Experience conducting vulnerability assessments and penetration testing in enterprise environments
- Strong written communication skills for drafting incident reports and security policies
Security Analyst Jobs in Pennsylvania: Frequently Asked Questions
How do you become a security analyst in Pennsylvania?
Pennsylvania does not require a state-issued license to work as a security analyst, so the path centers on education and industry credentials. Most Pennsylvania employers expect at least a bachelor's degree in cybersecurity, computer science, or information systems, paired with a certification such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH). Defense contractors in the Philadelphia and Pittsburgh areas often add a federal security clearance requirement for senior roles.
Which companies hire security analysts in Pennsylvania?
Employers hiring security analysts in Pennsylvania right now include PNC Financial Services, BNY, and HYDAC, based on current listings on Migrate Mate as of September 2026. Pennsylvania's concentration of defense contractors, large health systems, and regional financial institutions means security analyst demand here tends to be more consistent and less cyclical than in purely tech-driven markets.
Which Pennsylvania cities have the most security analyst jobs?
Pittsburgh, Philadelphia, and Radnor account for the most security analyst openings in Pennsylvania. Philadelphia leads because of its density of financial services firms, health systems, and federal agency regional offices, while Pittsburgh draws demand from defense contractors, Carnegie Mellon-affiliated tech employers, and large healthcare networks. Harrisburg's openings are driven heavily by state government IT and the agencies that support Pennsylvania's public-sector infrastructure.
Are there remote security analyst jobs in Pennsylvania?
Yes, and more than most fields. About 50% of security analyst openings tied to Pennsylvania are remote or hybrid as of September 2026, reflecting how much of the work involves monitoring dashboards, writing policies, and analyzing data rather than on-site hardware. Threat intelligence, cloud security, and compliance roles are the most likely to be fully remote, while positions requiring physical access to data centers or classified facilities remain on-site.
How can I get hired as a security analyst in Pennsylvania with little or no experience?
The most realistic entry path is a help desk or IT support role at a Pennsylvania health system, state agency, or regional bank, then moving into a junior security analyst position once you have one to two years of network or systems exposure. Large Pennsylvania health systems and financial institutions run rotational IT programs that include security rotations for recent graduates. Earning CompTIA Security+ before applying significantly improves your odds, and a home lab or documented capture-the-flag competition experience can substitute for formal work history in smaller firm interviews.
Where can I find and apply to security analyst jobs in Pennsylvania?
You can find and apply to security analyst jobs in Pennsylvania on Migrate Mate, which lists current Pennsylvania openings across Philadelphia, Pittsburgh, Harrisburg, and beyond. Find a role that fits your experience level and specialty, then apply directly to the employer through the listing.
See All 21 Security Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Security Analyst Jobs