Information Security Analyst – Vulnerability & Incident Response

Sherpa-6; Spring Lake (NC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive benefits package

Paid time off (PTO)

Retirement savings plan

Medical, dental, vision coverage

Job summary

Sherpa 6 is seeking an Information Security Specialist to maintain the security posture of internal information systems and ensure compliance with cybersecurity frameworks. You will work with Security, IT, leadership, and compliance teams to support vulnerability management, audit readiness, incident response, and secure system operations.

The role requires hands-on experience with enterprise security tools and processes, including vulnerability management, change management, audit log review,

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
• 3-5 years of experience in information security or cybersecurity operations.
• Experience with Microsoft Defender, Intune, and Purview.

Responsibilities

• Manage system vulnerabilities, including scanning, prioritization, and remediation.
• Support patching and configuration enforcement through endpoint management solutions.
• Provide continuous monitoring of information systems, ensuring audit logs are collected, reviewed, and anomalous activity is identified and mitigated.
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services.
• Configure and tune alerting and automated response capabilities for security events.
• Perform incident response and reporting for cybersecurity events including malware, phishing, unauthorized access, and data exfiltration.
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Ensure all system security documentation is current and audit-ready.
• Assist in development and maintenance of security policies, standards, and technical controls.
• Review and assess security impact of system changes as part of change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms.
• Conduct user activity monitoring and support investigations related to potential insider threat or policy violations.
• Run security awareness initiatives, including phishing simulations and training activities.
• Prepare reports on the status of vulnerabilities, incidents, and overall security posture.

Skills

Vulnerability management

Incident response

Endpoint security

Log analysis

Education

Bachelor’s degree in Computer Science or related field

Tools

Microsoft Defender

Microsoft Intune

Microsoft Purview

SIEM

Job description

Sherpa 6 is seeking an Information Security Specialist to maintain the security posture of internal information systems and ensure compliance with cybersecurity frameworks. You will work with Security, IT, leadership, and compliance teams to support vulnerability management, audit readiness, incident response, and secure system operations.

The role requires hands-on experience with enterprise security tools and processes, including vulnerability management, change management, audit log review,