Information Security Analyst: Incident Response & Risk

Total Wine & More; Bethesda (MD); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

PTO

Health care plans

401(k)

HSA/FSA

Life insurance

Parental leave

Pet insurance

Tuition assistance

Career development

Job summary

Total Wine & More in Bethesda, MD is seeking an experienced Information Security Analyst to join our Technology team in-office. You will lead incident response, vulnerability management, and DLP efforts while partnering with IT and business stakeholders to improve risk visibility.

The role provides exposure to risk management, third party risk, policy development, and secure architecture across cloud and on‑prem environments, with on‑call rotations and opportunities to influence security

Qualifications

• Bachelor's degree in Information Security or related field.
• 1-4 years in IT with at least 2 years in information security preferred.
• Experience securing cloud platforms such as Azure, AWS, and GCP.
• Experience with Microsoft Purview or similar insider threat/DLP tools.
• Knowledge of network architecture and system/app security.
• Familiarity with NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA.

Responsibilities

• Implement security and compliance processes for application security, vulnerability management, insider threat monitoring, and DLP initiatives.
• Coordinate vulnerability disclosures, evaluate findings, and drive remediation with IT and business partners.
• Assess configurations and controls to identify threats and recommend actions.
• Respond to security events via SIEM alerts, aiding investigation and containment.
• Maintain security metrics, dashboards, and reporting to improve risk visibility.
• Investigate user-reported incidents with root-cause analysis and on-call rotations.
• Support identity, endpoint protection, and disaster recovery initiatives.

Skills

Incident response

Vulnerability management

Insider threat monitoring

Data loss prevention

Security reporting

Risk management

Policy development

Security engineering

Education

Bachelor's Degree in Information Security

Tools

Azure

AWS

GCP

Microsoft Purview

SIEM

Windows Server

Unix/Linux

Job description

Total Wine & More in Bethesda, MD is seeking an experienced Information Security Analyst to join our Technology team in-office. You will lead incident response, vulnerability management, and DLP efforts while partnering with IT and business stakeholders to improve risk visibility.

The role provides exposure to risk management, third party risk, policy development, and secure architecture across cloud and on‑prem environments, with on‑call rotations and opportunities to influence security