Information Technology Security Analyst

The Phoenix Group; New York (NY); On-site; USD 80,000 - 120,000; Full time

Job summary

A security-focused technology company located in New York is seeking an IT Security Analyst to enhance protection of enterprise systems and data. The role includes reviewing security alerts, investigating incidents, and performing vulnerability analysis. Ideal candidates have a bachelor's degree in a technology-related field and experience in security operations. This position is vital for strengthening security controls through collaboration and automation in a constantly evolving threat landscape.

Qualifications

• Bachelor's degree in a technology-related field or equivalent hands-on experience.
• Background in security operations, incident response, or risk-focused IT roles.
• Familiarity with security frameworks and regulatory standards.

Responsibilities

• Review security alerts and logs to identify threats and irregular behavior.
• Investigate incidents, support containment and remediation efforts.
• Perform vulnerability analysis and advise on remediation.

Skills

Security operations

Incident response

Risk assessment

Scripting automation

Vulnerability management

Education

Bachelor’s degree in a technology-related field

Tools

SIEM/EDR tools

Endpoint protection platforms

Job description

We are looking for an IT Security Analyst to help protect enterprise systems, data, and cloud environments from emerging threats. This role focuses on identifying risk, detecting abnormal behavior, responding to incidents, and continuously strengthening security controls through collaboration, analysis, and automation.

Key Responsibilities

• Review security alerts, logs, and network activity to identify threats and irregular behavior.
• Investigate incidents, coordinate escalation, and support containment and remediation efforts.
• Perform vulnerability analysis, validate findings, and advise on remediation and patching.
• Tune, manage, and audit security tools such as endpoint protection, monitoring, and scanning platforms.
• Analyze user, system, cloud, and email activity to detect misuse or compromise.
• Partner with IT, engineering, and vendors to improve defensive controls and security workflows.
• Contribute to security policies, procedures, and awareness initiatives across the organization.
• Support regulatory, audit, and third-party risk assessment activities.
• Produce clear reporting on security posture, incidents, and improvement initiatives.
• Stay informed on attacker techniques, industry trends, and evolving threat landscapes.

Required Experience & Knowledge

• Bachelor’s degree in a technology-related field or equivalent hands-on experience.
• Background in security operations, incident response, or risk-focused IT roles.
• Familiarity with security frameworks and regulatory standards (e.g., NIST, ISO, HIPAA, GDPR).
• Working knowledge of identity and access management, authentication methods, and directory services.
• Understanding of networking concepts, endpoint protection, and detection technologies.
• Experience with vulnerability management, malware analysis, or forensic investigations.
• Exposure to modern security platforms and SIEM/EDR-style tooling.
• Ability to script or automate routine security tasks is strongly preferred.
• Industry certifications are a plus, but not required.