IT Security Analyst

EPIC Piping; Baton Rouge (LA); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Competitive base salary

Discretionary bonus

Comprehensive benefits package

401(k) with company match

Career growth

Job summary

United Weld Holdings is seeking an experienced IT Security Analyst to join the Information Technology team in Baton Rouge. The role focuses on protecting information systems, networks, and AI deployments, implementing security policies, monitoring threats, and coordinating incident response.

You will work with stakeholders and partners to maintain a strong security posture, perform vulnerability testing, patch management, and ensure compliance with standards such as NIST and ISO 27001.

Qualifications

• 5+ years of information security experience.
• Experience developing security policies and procedures.
• Experience coordinating incident response.
• Experience with vulnerability assessments and pen testing.
• Strong Windows security, patching, and hardening.
• Experience with enterprise firewall platforms (Cisco Meraki, Fortinet).
• Experience with SIEM platforms.
• Experience with MDR services (Arctic Wolf or similar).
• Experience with Microsoft 365 and Azure security features.
• Understanding of AI governance and data privacy in enterprise AI.
• Experience supporting manufacturing or industrial environments.
• Industry certifications and compliance frameworks (NIST, ISO 27001, CIS Controls).
• Experience securing Microsoft Copilot/Azure AI controls or similar.
• Familiarity with AI risk management frameworks.

Responsibilities

• Develop and maintain information security policies and standards.
• Monitor security posture and investigate events for threats.
• Coordinate incident response, containment, and recovery.
• Develop and test incident response and disaster recovery plans.
• Perform vulnerability assessments and oversee remediation.
• Maintain Windows workstation/server security and patching.
• Manage firewall, VPN, and network segmentation policies.
• Support M365 and Azure security administration.
• Assist with AI security governance and risk assessments.
• Create security documentation and training materials.

Skills

Security analysis

Incident response

Vulnerability assessment

Patch management

SIEM

Network security

AI security governance

Windows security

Communication skills

Education

CISSP

Security+

GSEC

CySA+

CEH

Microsoft Security certifications

Tools

Cisco Meraki

Fortinet FortiGate

SIEM platforms

Arctic Wolf MDR

Sophos security products

Microsoft 365 security

Azure security

Job description

United Weld Holdings has an exciting opportunity for an experienced IT Security Analyst to join our Information Technology team.

IT Security Analyst

United Weld Holdings: Epic Piping, BendTec

Location: Fully Onsite, Baton Rouge, LA - not a remote position

Relocation services are not offered

Travel Required

Company Overview

United Weld Holdings is a large-scale, industry-leading pipe fabrication company, headquarted in Baton Rouge, LA specializing in high-complexity piping spools and pipe supports for critical infrastructure projects. With multiple high production fabrication facilities with locations in Livingston, LA; San Marcos, TX; and Duluth, MN, with advanced welding and testing capabilities, and a reputation for critical path execution. We support major clients in the petrochemical, refining, oil & gas, power generation, and data center sectors across North America as well as internationally. Our continued growth has created an outstanding opportunity for a results-driven Business Development professional to further expand our market share.

Position Summary

The IT Security Analyst is responsible for protecting the organization's information systems, network infrastructure, and digital assets by implementing and maintaining effective cybersecurity practices. Also supports the organization's secure adoption and governance of AI technologies by helping establish security standards, monitoring AI-related risks, and ensuring AI solutions align with organizational security policies and regulatory requirements. This role focuses on developing or enhancing those security policies, monitoring and investigating security threats, coordinating incident response activities, managing vulnerability assessments, and ensuring systems remain secure through proactive maintenance and continuous improvement. This position will work closely with business stakeholders, and third-party security partners to maintain a strong security posture in support of a growing pipe fabrication and distribution business. This position will report to the IT Network & Security Specialist.

Key Responsibilities

• Develop, implement, maintain, and periodically review information security policies, standards, procedures, and best practices.
• Monitor the organization's security posture and investigate security events, alerts, and suspicious activities to identify potential threats and vulnerabilities.
• Coordinate incident response activities, including investigation, containment, eradication, recovery, documentation, and post-incident reviews.
• Assist in developing, testing, and maintaining incident response and disaster recovery plans.
• Perform vulnerability assessments and penetration testing activities, either directly or in coordination with third-party providers, and oversee remediation efforts.
• Maintain security of Windows workstations and Windows Server environments through regular patching oversight, configuration reviews, and security hardening.
• Administer and monitor security technologies including endpoint protection, firewalls, identity management, email security, and cloud security solutions.
• Review security logs and alerts using SIEM and managed detection and response platforms to identify emerging threats and recommend corrective actions.
• Manage and maintain firewall security policies, VPN connectivity, and network segmentation to support secure business operations.
• Collaborate with IT infrastructure teams to ensure secure system configurations and compliance with organizational security standards.
• Support Microsoft 365 and Microsoft Azure security administration, including identity protection, conditional access, multi-factor authentication, and related security controls.
• Participate in security risk assessments and recommend mitigation strategies for new technologies and business initiatives.
• Assist with security awareness training and promote cybersecurity best practices throughout the organization.
• Maintain documentation related to security configurations, procedures, incident investigations, and compliance activities.
• Develop and maintain security standards, policies, and governance for the secure use of artificial intelligence (AI) technologies across the organization.
• Assess the security and privacy risks associated with AI platforms, applications, and third-party AI services before deployment.
• Monitor emerging AI-related threats, including prompt injection, data leakage, model misuse, and unauthorized use of AI tools, and recommend appropriate safeguards.
• Collaborate with IT and business stakeholders to implement secure AI solutions while protecting confidential, proprietary, and customer information.
• Assist in establishing controls for the use of generative AI technologies, including data classification, acceptable use, access management, and monitoring.
• Evaluate AI vendors and cloud AI services for compliance with organizational security requirements and industry best practices.
• Monitor approved AI platforms for security configuration and compliance with organizational policies.
• Provide guidance and user awareness training on the secure and responsible use of AI technologies.
• Stay current on cybersecurity threats, emerging technologies, regulatory requirements, and industry best practices.
• Complete all over tasks assigned by supervisor.

Required Qualifications

• 5+ years of experience
• Experience developing and maintaining information security policies and procedures.
• Experience investigating security incidents and coordinating incident response activities.
• Experience conducting or managing vulnerability assessments and penetration testing initiatives.
• Strong knowledge of Windows workstation and Windows Server security, patch management, and system hardening.
• Experience administering and troubleshooting enterprise firewall platforms such as Cisco Meraki or Fortinet FortiGate.
• Experience working with Security Information and Event Management (SIEM) platforms.
• Experience with Arctic Wolf Managed Detection and Response (MDR) services or similar managed security platforms.
• Experience administering Sophos security products, including endpoint protection and related security solutions.
• Strong knowledge of Microsoft 365 and Microsoft Azure security features, including identity and access management.
• Understanding of networking concepts, authentication protocols, and cybersecurity best practices.
• Working knowledge of cybersecurity considerations related to artificial intelligence, machine learning, and generative AI technologies.
• Understanding of AI governance principles, data privacy considerations, and security risks associated with enterprise AI platforms.
• Strong analytical, problem-solving, and communication skills.
• Experience supporting manufacturing, industrial, or distribution environments.
• Knowledge of operational technology (OT) or industrial control system (ICS) security principles.
• Industry certifications such as CISSP, Security+, GSEC, CySA+, CEH, Microsoft Security certifications, or comparable credentials.
• Experience supporting regulatory or compliance frameworks such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, or similar standards.
• Experience securing Microsoft Copilot, Microsoft 365 Copilot, Azure AI services, Microsoft Purview AI controls, or comparable enterprise AI platforms.
• Familiarity with AI governance frameworks such as the NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, or similar emerging AI security standards.
• Experience implementing data protection controls for AI applications, including Data Loss Prevention (DLP), sensitivity labeling, and information protection.

What We Offer

• Competitive base salary commensurate with experience.
• Discretionary bonus based on company performance, merit and goals achieved.
• Comprehensive benefits package: medical, dental, vision, life insurance, short-and long-term disability.
• 401(k) with company match.
• Collaborative culture that values integrity, innovation, and execution.
• Professional development opportunities and career growth within a rapidly expanding organization.

As an equal opportunity employer, Epic Piping is committed to the development of its employees and strives to promote an environment that fosters personal training and development