Information Security Analyst

Dexian; Bethesda (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

Dexian is seeking an Information Security Analyst to join its growing security team in Bethesda, MD. The role focuses on incident response, vulnerability management, insider threat monitoring, data loss prevention, and governance to support risk-based security throughout the organization.

You will collaborate with IT and business stakeholders, implement security controls, and contribute to policy development, risk management, and incident remediation.

Qualifications

• Bachelor's degree in Information Security or related field.
• 1-4 years in IT, with at least 2 in information security.
• Experience securing cloud platforms (Azure, AWS, GCP).
• Familiarity with security frameworks and regulatory requirements (NIST, COBIT, ISO27001, PCI-DSS, GDPR, CCPA).
• Experience with Insider Threat and Data Loss Prevention tools.

Responsibilities

• Implement and maintain security and compliance processes for application security, vulnerability management, insider threat monitoring, and DLP initiatives.
• Coordinate vulnerability disclosures and drive remediation efforts with IT and business stakeholders.
• Evaluate security configurations, controls, and monitoring tools to identify threats and recommend actions.
• Respond to security events identified via SIEM alerts and assist with investigation and containment.
• Maintain security and compliance dashboards and reporting to improve risk visibility.
• Investigate, resolve, and document user-reported security incidents including on-call rotations.
• Support initiatives like IAM, endpoint protection, and disaster recovery.

Skills

Incident response

Vulnerability management

Insider threat monitoring

Cloud security

Security policies

Collaboration

Education

Bachelor's Degree in Information Security

Tools

Azure

AWS

GCP

SIEM

DLP tools

Job description

Seeking an Information Security Analyst to join a growing information security team. The role involves managing various information security responsibilities such as incident response, vulnerability management, insider threat management, data loss prevention, and reporting to senior leadership. The position also provides exposure to other security disciplines including risk management, third-party risk management, policy development, and security engineering. The successful candidate will implement security and compliance processes to support application security, threat monitoring, and data protection initiatives, while collaborating with IT and business stakeholders to address security findings and emerging threats.

Key Responsibilities

• Implement and maintain security and compliance processes supporting application security, vulnerability management, insider threat monitoring, and data loss prevention initiatives.
• Coordinate vulnerability disclosures, assess reported security issues, and partner with IT and business stakeholders to drive remediation efforts.
• Evaluate security configurations, controls, and monitoring tools to identify emerging threats and suggest corrective actions.
• Respond to security events identified through SIEM alerts, supporting investigation, containment, and remediation activities.
• Maintain and improve security and compliance metrics, dashboards, and reporting tools to enhance operational effectiveness and risk visibility.
• Investigate, resolve, and document user-reported security incidents through root cause analysis, including participation in on-call support rotations.
• Support strategic initiatives like identity and access management, endpoint protection, and disaster recovery.

Required Qualifications

• Bachelor's Degree in Information Security or equivalent years of related experience.
• 1-4 years of experience in an information technology discipline, with at least 2 years in information security preferred.
• Experience working with and securing cloud platforms such as Azure, AWS, and GCP.
• Experience working with compliance tools focused on Insider Threats and Digital Loss Prevention.
• Intermediate knowledge of network architecture and security controls for networks, systems, and applications.
• Intermediate knowledge of Windows Server and Unix/Linux operating systems.
• Familiarity with security frameworks, regulatory requirements, and standards including NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA.

Preferred Qualifications

• Experience with developing and implementing security policies and procedures.
• Ability to analyze and respond to security alerts and incidents effectively.
• Strong collaboration skills to coordinate with cross-functional teams and stakeholders.
• Demonstrated understanding of security monitoring, risk management, and compliance operations.

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.

Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.To learn more, please visit https://dexian.com/.

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.