Security Analyst

eNGINE; Pittsburgh (Allegheny County); On-site; USD 70,000 - 110,000; Full time

Job summary

eNGINE, a solutions and placement firm, is hiring a Security Analyst who sits at the intersection of cyber security and data-driven accountability. You will review reports and controls across IAM, Vulnerability Management, and other security domains and flag issues with evidence and results.

Responsibilities include analyzing security data, recommending risk mitigations, collaborating with ISD ECM and teams, and supporting policy waivers and risk discussions.

Qualifications

• Bachelor's degree in Computer Science or related field (or equivalent experience).
• Experience in GRC within information security; financial services/securities industry experience a plus.
• Strong analytical and troubleshooting skills — you're comfortable digging into data and asking tough questions.
• Experience with BI/data reporting tools (SQL, DB2, Power BI, Tableau, Excel/PowerPoint) — you don't need to build these tools, just read and interpret what they produce.
• Working knowledge of cybersecurity frameworks (NIST CSF, CRI, ISO, etc.).
• General understanding of Identity and Access Management (IAM) principles a plus.

Responsibilities

• Review and analyze complex security data to deliver clear insights, conclusions, and actionable recommendations
• Recommend risk mitigation strategies, ensuring standards are met in coordination with ISD ECM, and expand high-risk activity for treatment
• Identify operational roadblocks and drive timely remediation
• Partner closely with Information Security and other teams in a collaborative, goal-oriented way
• Support ad hoc reporting and risk treatment discussions (IAM & Vulnerability remediation), partnering with the ISD ECM Operations team on policy waivers and control gap oversight
• Consult with IT and business stakeholders to support key components of the company's information security infrastructure

Skills

GRC in information security

Analytical and troubleshooting skills

Cybersecurity frameworks

IAM concepts

BI/data reporting tools

Education

Bachelor's degree in Computer Science or related field

Tools

SQL

DB2

Power BI

Tableau

Qlik

Excel/PowerPoint

Business Objects

Job description

eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE.

eNGINE is hiring a Security Analyst, who sits at the intersection of cyber security and data-driven accountability. You'll review reports and controls across IAM, Vulnerability Management, and other security domains — and when something doesn't add up (like a policy mandating 16-character passwords changed every 60 days, but only half the team complying), you'll be the one to flag it, grade it, and back it up with evidence.

Responsibilities

• Review and analyze complex security data to deliver clear insights, conclusions, and actionable recommendations
• Recommend risk mitigation strategies, ensuring standards are met in coordination with ISD ECM, and expand high-risk activity for treatment
• Identify operational roadblocks and drive timely remediation
• Partner closely with Information Security and other teams in a collaborative, goal-oriented way
• Support ad hoc reporting and risk treatment discussions (IAM & Vulnerability remediation), partnering with the ISD ECM Operations team on policy waivers and control gap oversight
• Consult with IT and business stakeholders to support key components of the company's information security infrastructure

What You Bring

• Bachelor's degree in Computer Science or related field (or equivalent experience); advanced degree a plus
• Experience in GRC (Governance, Risk & Compliance) within information security or related technology; financial services/securities industry experience a plus
• Strong analytical and troubleshooting skills — you're comfortable digging into data and asking tough questions
• Experience with BI/data reporting tools (SQL, DB2, Power BI, Business Objects, Qlik, Tableau, Excel/PowerPoint) — you don't need to build these tools, just read and interpret what they produce
• Working knowledge of cybersecurity frameworks (NIST CSF, CRI, ISO, etc.)
• General understanding of Identity and Access Management (IAM) principles a plus

No C2C, relocation, referral, or sponsorship candidates for this role.