IT Security Analyst

Baltimore-Corps; Baltimore (MD); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Vision insurance

Paid holidays

Job summary

Site in Baltimore seeks an IT Security Analyst to protect the organization’s IT infrastructure, acting as a liaison between IT Security and the business. The role focuses on risk identification and mitigation through business impact analyses and security controls, with emphasis on continuity and DR planning.

You will monitor, investigate, and respond to threats using SIEM platforms and endpoint detection tools, develop incident response playbooks, and provide hands-on support and training as

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or information security roles.
• Strong analytical thinking with ability to spot patterns and trends.
• Ability to work independently and as part of a team.
• Familiarity with BC/DR frameworks such as NIST, ISO27001, SOC2.
• Proficiency in documentation and process development.
• Understanding of how IT and security enable business operations.
• Technical skillset to configure security tools and systems.
• Willingness to travel some.

Responsibilities

• Monitor, investigate, and respond to security threats across the organization.
• Develop and maintain IT security documentation and runbooks.
• Conduct risk assessments and business impact analyses for areas.
• Assist with incident response and escalation procedures.
• Participate in threat hunting and vulnerability assessments.
• Generate routine security reports for internal stakeholders.
• Collaborate with business stakeholders to translate security needs.

Skills

SIEM platforms

Threat hunting

Vulnerability assessment

Incident response

Security monitoring

Documentation

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Endpoint Detection Tools

Job description

We are seeking an IT Security Analyst responsible for protecting and strengthening the organization’s IT infrastructure while serving as a key liaison between IT Security and the business. This role focuses on risk identification and mitigation through business impact assessments, security awareness initiatives, and the implementation of technical and procedural controls, with an emphasis on business continuity and disaster recovery. Responsibilities include monitoring, investigating, and responding to security threats across the organization. The ideal candidate has hands‑on experience with a variety of industry standard tools with a strong understanding of IT infrastructure, excellent analytical and communication skills, and a service‑oriented mindset. The candidate will also assist with escalated issue resolution by providing in‑person hands‑on support to end users as needed.

Description:

• Support the development and testing of business continuity and disaster recovery plans, including coordinating and documenting tabletop exercises and assisting with staff training to ensure readiness during disruptive events.
• Conduct risk assessments and business impact analyses for assigned business areas to identify potential threats and operational impacts.
• Monitor security alerts and events using SIEM platforms and endpoint detection tools, escalating incidents as appropriate.
• Investigate and respond to security incidents such as phishing attempts, malware infections, and unauthorized access, following established incident response procedures.
• Analyze logs from network, endpoint, and identity systems to identify indicators of suspicious or malicious activity.
• Participate in threat hunting activities and proactive vulnerability assessments and work with IT to remediate identified risks.
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks.
• Generate routine reports on security events, trends, and operational metrics for internal stakeholders.
• Support collaboration between technical teams and business stakeholders by helping translate security requirements into practical, business‑friendly guidance.
• Research emerging cybersecurity technologies and assist in evaluating third‑party security tools and vendors to support business needs.
• Work with third‑party vendors under guidance to support integrations, issue resolution, and service delivery.
• Provide helpdesk coverage and respond to escalated user issues as required, including participation in scheduled after‑hours on‑call support.
• Stay current on emerging threats, vulnerabilities, and security best practices to continuously develop skills and improve the organization’s security posture.
• Provide IT Manager on Duty coverage, both on site and remote on call, on a rotating shared basis to cover defined hours of operation.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or information security roles.
• Strong analytical thinking, and the ability to spot patterns and trends.
• Ability to work independently and as part of a team.
• Familiarity with business continuity, risk assessment, and disaster recovery frameworks such as NIST, ISO27001, SOC2.
• Proficiency in documentation and process development.
• Understanding of how IT and security can enable business operations.
• Technical skillset to configure security tools and systems.
• Knowledge of IT infrastructure concepts.
• Self‑motivation and accountability for ensuring service levels are achieved/exceeded.
• Flexible schedule with some travel required.
• Health insurance
• Paid time off
• Vision insurance
• Paid holidays

Salary: $90,000 – $100,000 annually

* Baltimore Corps is an equal employment opportunity employer and does not discriminate on the basis of race, color, creed, religion, national origin, gender, age, disability, genetic information, veteran status, citizenship status, or any other characteristic protected under federal, state, or local law. Please verify you have reviewed this statement