Hybrid IT Security Analyst II — Incident & Vulnerability

OpenKrill; United States; Hybrid; USD 109,000 - 127,000; Full time

Job summary

Kairos Power is seeking an IT Security Analyst II to strengthen the security and compliance of its hybrid, multi-site IT environment, including on-premises systems and SaaS platforms. You will monitor, detect, and respond to security events and coordinate with IT and business teams to reduce risk.

The role requires hands-on experience with SIEM, vulnerability management, incident response, and knowledge of NIST 800-171, CMMC or ISO 27001.

Qualifications

• Bachelor's degree or equivalent in CS/IT/Cybersecurity.
• 4+ years in IT security or cybersecurity operations.
• Hands-on analysis of security events with SIEM and EDR tools.
• Experience with identity, access, and endpoint security technologies.
• Familiarity with NIST 800-171, CMMC, ISO 27001 or similar.
• Professional certifications such as Security+, CySA+, GSEC, SSCP preferred.
• Experience in regulated industries or government contractors preferred.

Responsibilities

• Monitor networks, systems, and cloud platforms for security incidents.
• Configure systems into the enterprise SIEM and validate logs.
• Investigate alerts from SIEM, EDR, firewall, IAM; escalate as needed.
• Contain and remediate security incidents with coordination.
• Perform vulnerability management scanning and remediation tracking.
• Collaborate with IT teams to address security risks.
• Maintain security policies, data handling, access control, incident response.
• Assist audits and control assessments against regulatory frameworks.
• Monitor and report security metrics and remediation progress.

Skills

Security operations

SIEM analysis

Incident response

Vulnerability management

Identity & access mgmt

Zero-trust / MFA

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft 365

Entra ID

SSO

MFA

Endpoint management

Job description

Kairos Power is seeking an IT Security Analyst II to strengthen the security and compliance of its hybrid, multi-site IT environment, including on-premises systems and SaaS platforms. You will monitor, detect, and respond to security events and coordinate with IT and business teams to reduce risk.

The role requires hands-on experience with SIEM, vulnerability management, incident response, and knowledge of NIST 800-171, CMMC or ISO 27001.