Analyst, Information Security

Wine Industry Expo; Bethesda (MD); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health care plans (medical, dental, &/

401(k)

Paid Time Off

Job summary

Total Wine & More in Bethesda, MD is seeking an Information Security Analyst to join our Technology team. You will focus on incident response, vulnerability management, insider threat monitoring, data loss prevention, and reporting to senior leadership.

The role also offers exposure to risk management, third‑party risk management, policy development, and security engineering. Ideal candidates hold a Bachelor's in Information Security or equivalent experience, 2+ years in security, and hands-on

Qualifications

• Bachelor's degree in Information Security preferred or equivalent years of experience
• 1–4 years in an IT-related discipline, with at least 2 years in information security preferred
• Experience with cloud platforms such as Azure, AWS, and GCP, and with Purview or similar compliance tools

Responsibilities

• Implement security and compliance processes for application security, vulnerability management, insider threat monitoring, and DLP initiatives.
• Coordinate vulnerability disclosure activities, evaluate findings, and drive remediation with IT and business stakeholders.
• Assess security configurations, controls, and monitoring tools to identify threats and recommend actions.
• Respond to security events identified through SIEM alerts, including investigation, containment, and remediation.
• Maintain security metrics, dashboards, and reporting tools to improve risk visibility.
• Investigate and document user-reported security incidents, including root-cause analysis and on-call rotations.
• Support strategic information security initiatives including IAM, endpoint protection, and disaster recovery.

Skills

Cloud security

Incident response

Vulnerability management

DLP

Insider threat

On-call rotations

Education

Bachelor's degree in Information Security

Tools

Microsoft Purview

SIEM tooling

Job description

About The Role

Total Wine & More is seeking an experienced Information Security Analyst to join our growing Technology team in our Bethesda, MD office. You will focus on information security responsibilities including incident response, vulnerability management, insider threat management, data loss prevention (DLP), and reporting and presenting to senior leadership. You will also provide exposure to other information security disciplines such as risk management, third party risk management, policy development, and security engineering. You will report to the Senior Director of Information Security.

You will

• Implement security and compliance processes that support application security, vulnerability management, insider threat monitoring, and data loss prevention initiatives.
• Coordinate vulnerability disclosure activities, evaluate reported security findings, and partner with IT and business stakeholders to drive remediation.
• Assess security configurations, controls, and monitoring tools to identify emerging threats and recommend corrective actions.
• Evaluate and respond to security events identified through SIEM alerts, supporting investigation, containment, and remediation efforts.
• Maintain security and compliance metrics, dashboards, and reporting tools to improve operational effectiveness and risk visibility.
• Investigate, resolve, and document user-reported security incidents through root cause analysis and corrective actions, including participation in on-call support rotations.
• Support strategic information security initiatives, including identity and access management, endpoint protection, and disaster recovery efforts.

You will come with

• Bachelor's Degree in Information Security preferred or equivalent years of experience
• 1-4 years in an information technology related discipline, with at least 2 years in information security preferred
• Experience working with and securing cloud platforms such as Azure, AWS, and GCP
• Experience working with Microsoft Purview or other similar compliance tools focused on Insider Threats and Digital Loss Prevention
• Intermediate knowledge of network architecture and network, system, and application security
• Intermediate knowledge of Windows server and Unix/Linux operating systems
• Working knowledge of security frameworks, regulatory requirements, and industry standards such as NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA

We offer

• Paid Time Off (PTO)
• Generous store discounts
• Health care plans (medical, prescription, dental, vision)
• 401(k), HSA, FSA, Pre-tax commuter benefits
• Disability & life insurance coverage
• Paid parental leave
• Pet insurance
• Critical illness and accident insurance
• Discounted home and auto insurance
• College tuition assistance
• Career development & product training
• Consumer classes
• & More!

Crafted for you

If you share our entrepreneurial spirit and a passion for providing best-in-class customer experience, The exempt compensation range for this position is . Total Wine & More considers several factors when establishing compensation. Estimated salaries determined by third parties have not been validated by Total Wine & More. Compensation may vary based on a number of factors including, but not limited to, market location, job-related knowledge, skills and/or experience. Total Wine & More is an equal opportunity employer and all qualified applicants will receive consideration for employment without discrimination based on race, color, religion, national origin, sex, sexual orientation, age, marital status, veteran status, disability, or any other characteristic protected by applicable law. Total Wine & More makes reasonable accommodations during all aspects of the employment process, including during the interview process. Total Wine & More is a Drug Free Workplace. The information provided above indicates the general nature and level of work required of the position and is not a comprehensive list of all responsibilities or qualifications. Benefits list is only a highlight of some of the benefits offered to team members; eligibility for certain benefits apply.