Security Analyst

WFI International; Houston (TX); On-site; USD 70,000 - 110,000; Full time

Job summary

WFI International is seeking a Security Analyst to implement, monitor, and maintain cybersecurity controls across endpoints, networks, and cloud environments. You will support IAM, vulnerability management, security monitoring, incident response, and governance aligned with NIST, CMMC, and ISO standards.

You will participate in phishing simulations, security awareness, and ongoing documentation, delivering security services and technical guidance to protect information assets in a fast-paced

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 3 to 5 years of IT experience, preferably including systems, networking, Microsoft 365, or cybersecurity responsibilities.
• 1 to 3 years of direct information-security experience preferred.

Responsibilities

• Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
• Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
• Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
• Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
• Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
• Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
• Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
• Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
• Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
• Maintain security documentation, incident records, technical procedures, and remediation tracking.

Skills

Security Operations

Incident Response

Threat Detection

Splunk SIEM

Microsoft Entra ID

Microsoft Defender

CrowdStrike Falcon

Identity and Access Mgmt

Vulnerability Management

Risk Assessment

Security Auditing

NIST SP 800-171

CMMC

ISO 27001 Compliance

Network Security

Root Cause Analysis

Technical Documentation

Security Awareness Training

Technical Writing

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field

Tools

Splunk

Microsoft Defender

Microsoft Entra ID

Microsoft Purview

CrowdStrike Falcon

Job description

Role Summary

The Security Analyst is responsible for the day-to-day implementation, monitoring, analysis, and maintenance of the organization's cybersecurity controls. This role supports identity and access management, endpoint and network security, vulnerability management, security monitoring, incident response, compliance, and security awareness.

Key Responsibilities

• Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
• Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
• Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
• Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
• Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
• Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
• Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
• Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
• Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
• Maintain security documentation, incident records, technical procedures, and remediation tracking.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field, or equivalent relevant technical experience.
• 3 to 5 years of IT experience, preferably including systems, networking, Microsoft 365, or cybersecurity responsibilities.
• 1 to 3 years of direct information-security experience preferred.
• Relevant certifications preferred, such as CompTIA Security+, CySA+, Microsoft SC-200, SC-300, or SC-400.

Key Skills: Security Operations, Incident Response, Threat Detection, Splunk SIEM, Microsoft Entra ID, Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Identity and Access Management, Vulnerability Management, Risk Assessment, Security Auditing, NIST SP 800-171, CMMC, ISO 27001 Compliance, Network Security, Firewall and VPN Administration, Root Cause Analysis, Technical Documentation, Security Awareness Training, Technical Writing and Root-cause analysis.