IT Security Analyst II — Hybrid Ops & Vulnerability

Kairos Power; Albuquerque, Santa Fe (NM, NM); Hybrid; USD 109,000 - 128,000; Full time

Job summary

Kairos Power is seeking an IT Security Analyst II to strengthen security, monitoring, and compliance across our multi-site, hybrid IT environment. You will perform security monitoring, vulnerability management, incident response, and control administration in a regulated setting, collaborating with IT and business teams to remediate risks.

The role emphasizes hands-on cybersecurity operations in a medium to enterprise-scale organization with frameworks such as NIST 800-171, CMMC, or ISO 27001.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or equivalent.
• 4+ years in IT security or cybersecurity operations.
• Experience with SIEM, EDR, vulnerability scanners, firewalls, and ticketing.
• Familiarity with NIST 800-171, CMMC, ISO 27001 preferred.
• Security+ or CySA+/GSEC preferred.

Responsibilities

• Monitor and analyze activity across networks, systems, cloud, and SaaS for security incidents.
• Configure systems into the enterprise SIEM and validate log collection.
• Investigate alerts from SIEM, EDR, and IAM; escalate risks as needed.
• Perform vulnerability management and remediation tracking through closure.
• Maintain security policies, controls, and audit evidence.

Skills

SIEM

Endpoint security

Vulnerability management

Identity & access management

Zero-trust

Incident response

Cloud security

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft 365

Entra ID

SSO

MFA

EDR

Firewalls

Vulnerability scanners

Ticketing systems

Job description

Kairos Power is seeking an IT Security Analyst II to strengthen security, monitoring, and compliance across our multi-site, hybrid IT environment. You will perform security monitoring, vulnerability management, incident response, and control administration in a regulated setting, collaborating with IT and business teams to remediate risks.

The role emphasizes hands-on cybersecurity operations in a medium to enterprise-scale organization with frameworks such as NIST 800-171, CMMC, or ISO 27001.