Security Analyst

The Phoenix Group; New York (NY); On-site; USD 65,000 - 95,000; Full time

Job summary

The Phoenix Group is seeking a security-focused professional to monitor security events, analyze logs, and assist in incident response. You will support vulnerability management, basic pen testing, and red team activities while helping maintain policies aligned with NIST, SOC 2, and HIPAA.

You will collaborate with engineering, IT, and product teams to remediate findings and contribute to threat detection use cases, staying current with industry best practices.

Qualifications

• 1–2 years of professional experience in information security, cybersecurity, or IT security.
• Fundamental knowledge of SIEM platforms, log analysis, and security monitoring concepts.
• Experience with vulnerability management, basic penetration testing, and red team methodologies.
• Familiarity with NIST, SOC 2, and HIPAA compliance standards.
• Basic networking, operating systems, cloud security, and system architecture understanding.
• Strong analytical, problem-solving, and troubleshooting skills.
• Effective communication to convey technical findings to diverse audiences.
• Willingness to learn and contribute to security governance, risk, and compliance initiatives.

Responsibilities

• Monitor and analyze security events using SIEMs like Splunk, SentinelOne, and others.
• Assist in incident response activities, including threat analysis and remediation coordination.
• Support vulnerability assessments, vulnerability scanning, and basic penetration testing (pen testing), including red team exercises.
• Document, track, and communicate security risks and mitigation strategies to stakeholders.
• Aid in maintaining and updating security policies, standards, and procedures aligned with frameworks (NIST, SOC 2, HIPAA).
• Participate in compliance activities, including evidence collection and audits.
• Collaborate with engineering, IT, and product teams to remediate security findings and implement best practices.
• Contribute to threat detection use case development and tuning of security monitoring systems.
• Stay informed on current security threats and industry best practices.

Skills

Information security concepts

Analytical thinking

Communication skills

Security governance

Tools

SIEM platforms

Job description

• Monitor and analyze security events and logs using Security Information and Event Management (SIEM) tools such as Splunk, SentinelOne, and others
• Assist in incident response activities, including threat analysis and coordination of remediation efforts
• Support vulnerability assessments, vulnerability scanning, and basic penetration testing (pen testing), including red team exercises
• Document, track, and communicate security risks and mitigation strategies effectively to technical and non-technical stakeholders
• Aid in maintaining and updating security policies, standards, and procedures aligned with industry frameworks (e.g., NIST, SOC 2, HIPAA)
• Participate in compliance activities, including evidence collection, audits, and adherence to security standards
• Collaborate with engineering, IT, and product teams to remediate security findings and implement best practices
• Contribute to threat detection use case development and tuning of security monitoring systems
• Stay informed on current security threats, emerging tools, and industry best practices

Core Qualifications & Requirement

• s1-2 years of professional experience in information security, cybersecurity, or IT security role
• sFundamental knowledge of SIEM platforms, log analysis, and security monitoring concept
• sExperience with vulnerability management, basic penetration testing, and red team methodologie
• sFamiliarity with security frameworks such as NIST, SOC 2, and HIPAA compliance standard
• sBasic understanding of networking, operating systems, cloud security, and system architectur
• eStrong analytical, problem-solving, and troubleshooting skill
• sEffective communication skills, capable of conveying technical findings clearly to diverse audience
• sDemonstrated willingness to learn and contribute to both technical security and governance, risk, and compliance initiative