Information Security Analyst

Dexian; Maryland; On-site; USD 75,000 - 105,000; Full time

Job summary

Dexian in Bethesda, MD is seeking an Information Security Analyst to join a growing information security team. The role involves incident response, vulnerability management, insider threat management, data loss prevention, and reporting to senior leadership.

The successful candidate will implement security and compliance processes to support application security, threat monitoring, and data protection initiatives, while collaborating with IT and business stakeholders to address security findings

Qualifications

• Bachelor's degree or equivalent in information security.
• 1-4 years IT/security experience preferred.
• Cloud security experience with Azure, AWS and GCP.
• Familiar with insider threat and data loss prevention tools.
• Knowledge of NIST, COBIT, ISO 27001, PCI-DSS, GDPR and CCPA.

Responsibilities

• Implement security and compliance processes supporting app security, vulnerability management, insider threat monitoring, and data loss prevention initiatives.
• Coordinate vulnerability disclosures and drive remediation with IT and business stakeholders.
• Evaluate security configurations, controls, and monitoring tools to identify threats and suggest corrective actions.
• Respond to security events identified through SIEM alerts, supporting investigation, containment, and remediation.
• Maintain security metrics, dashboards, and reporting tools to enhance risk visibility.
• Investigate, resolve, and document user-reported security incidents through root cause analysis, including on-call rotations.
• Support identity and access management, endpoint protection, and disaster recovery initiatives.

Skills

Incident response

Vulnerability management

Security monitoring

Data loss prevention

Risk management

Education

Bachelor's Degree in Information Security

Job description

INFORMATION SECURITY ANALYST

ONSITE 5 DAYS/WEEK | BETHESDA, MD

Position Summary

Seeking an Information Security Analyst to join a growing information security team. The role involves managing various information security responsibilities such as incident response, vulnerability management, insider threat management, data loss prevention, and reporting to senior leadership. The position also provides exposure to other security disciplines including risk management, third-party risk management, policy development, and security engineering. The successful candidate will implement security and compliance processes to support application security, threat monitoring, and data protection initiatives, while collaborating with IT and business stakeholders to address security findings and emerging threats.

Key Responsibilities

• Implement and maintain security and compliance processes supporting application security, vulnerability management, insider threat monitoring, and data loss prevention initiatives.
• Coordinate vulnerability disclosures, assess reported security issues, and partner with IT and business stakeholders to drive remediation efforts.
• Evaluate security configurations, controls, and monitoring tools to identify emerging threats and suggest corrective actions.
• Respond to security events identified through SIEM alerts, supporting investigation, containment, and remediation activities.
• Maintain and improve security and compliance metrics, dashboards, and reporting tools to enhance operational effectiveness and risk visibility.
• Investigate, resolve, and document user-reported security incidents through root cause analysis, including participation in on-call support rotations.
• Support strategic initiatives like identity and access management, endpoint protection, and disaster recovery.

Required Qualifications

• Bachelor's Degree in Information Security or equivalent years of related experience.
• 1-4 years of experience in an information technology discipline, with at least 2 years in information security preferred.
• Experience working with and securing cloud platforms such as Azure, AWS, and GCP.
• Experience working with compliance tools focused on Insider Threats and Digital Loss Prevention.
• Intermediate knowledge of network architecture and security controls for networks, systems, and applications.
• Intermediate knowledge of Windows Server and Unix/Linux operating systems.
• Familiarity with security frameworks, regulatory requirements, and standards including NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA.

Preferred Qualifications

• Experience with developing and implementing security policies and procedures.
• Ability to analyze and respond to security alerts and incidents effectively.
• Strong collaboration skills to coordinate with cross-functional teams and stakeholders.
• Demonstrated understanding of security monitoring, risk management, and compliance operations.

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.