Security Analyst

Cybersecurity Jobs; Raleigh (NC); On-site; USD 80,000 - 120,000; Full time

Job summary

Parker Poe Adams & Bernstein LLP is seeking a Security Analyst to protect the firm’s technology environment, data, and users through proactive cybersecurity operations. This Raleigh, NC onsite role monitors security activity, supports incident response and vulnerability management, and partners with technology teams to improve controls and reduce risk.

The ideal candidate has at least three years in IT/cybersecurity and a bachelor’s degree, with experience in security monitoring, threat

Qualifications

• Minimum three years in IT/cybersecurity or related field.
• Experience in security monitoring, threat detection, incident response, vulnerability management or related security functions.
• Experience analyzing security alerts, logs, and technical data.
• Familiarity with endpoint, network, identity, email, and cloud security concepts.

Responsibilities

• Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
• Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and risk.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Document investigations, response actions, and key findings for incident management and improvement.
• Assess significant security events and provide timely, actionable information to technology leaders.
• Stay current on emerging threats and cybersecurity trends.
• Assist vulnerability management by prioritizing remediation efforts across the technology environment.
• Collaborate with Infrastructure, Applications, and other teams to coordinate remediation and reduce risk.
• Support evaluation of cybersecurity controls and maintain security procedures and records.
• Contribute to audits, assessments, and compliance efforts.

Skills

Security event analysis

Incident response

Vulnerability management

Communication (technical to non-tech)

Independent work

On-call readiness

Education

Bachelor's degree in IT/CS or related

Tools

CompTIA Security+

CySA+

Microsoft Entra ID

Intune

Active Directory

Microsoft 365

Microsoft Defender

CrowdStrike Falcon

SIEM/EDR knowledge

Job description

Parker Poe Adams & Bernstein LLP is seeking a Security Analyst to help protect the firm’s technology environment, data, and users through proactive cybersecurity operations. In this Raleigh, NC onsite role, you will monitor and investigate security activity, support incident response and vulnerability management, and partner with multiple technology teams to improve security controls and reduce risk.

What you will do

• Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
• Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and assess cybersecurity risk.
• Support incident response activities, including containment, remediation, recovery, and post-incident reviews that strengthen defenses.
• Document investigations, response actions, and key findings to support incident management and continuous improvement.
• Assess and escalate significant security events, providing technology leaders with timely, actionable information.
• Stay current on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends.
• Assist vulnerability management by identifying, assessing, prioritizing, and tracking remediation efforts across the firm’s technology environment.
• Collaborate with Infrastructure, Applications, and other technology teams to coordinate remediation and reduce cybersecurity risk.
• Support implementation, maintenance, and ongoing evaluation of cybersecurity controls that protect systems, data, and users.
• Contribute to identity and access management efforts, including privileged access controls, account governance, and periodic access reviews.
• Help maintain and improve security technologies across endpoint, identity, network, cloud, monitoring, and detection environments.
• Identify opportunities to strengthen security processes, controls, and operational effectiveness through continuous improvement and proactive risk reduction.
• Maintain accurate security procedures, investigation records, and operational documentation for day-to-day security operations.
• Contribute to internal and external audits, assessments, and compliance efforts related to security and risk management objectives.
• Gather and organize evidence demonstrating the effectiveness of security controls and compliance practices.
• Support standardized, policy-driven security processes and operational procedures.
• Build strong working relationships with cross-functional technology teams to identify risks and strengthen controls.
• Communicate security findings, risks, and remediation recommendations clearly to technical and non-technical audiences.
• Champion cybersecurity awareness initiatives that reinforce best practices and strengthen the firm’s security culture.
• Perform other duties as assigned by leadership.

Key requirements

• Minimum three years of information technology, cybersecurity, information security, or related experience, plus a bachelor’s degree in information technology, computer science, or related field, or the combined equivalent education and experience.
• Experience supporting cybersecurity operations, including security monitoring, threat detection, incident response, vulnerability management, or related security functions.
• Experience analyzing security alerts, logs, and technical data.
• Familiarity with endpoint, network, identity, email, and cloud security concepts and technologies.
• Ability to communicate security findings and risks to both technical and non-technical audiences.
• Strong written and verbal communication skills, with a sense of urgency and the ability to multi-task in a fast-paced environment.
• Ability to work independently, exercise sound professional judgment, and handle sensitive and confidential information with discretion.
• Ability to participate in occasional on-call coverage and work outside regular business hours, including evenings, overnight hours, weekends, and holidays as needed.

Preferred experience and certifications

• Experience in a legal, professional services, financial services, or other security-conscious environment.
• Relevant certifications such as CompTIA Security+, CySA+, Microsoft Security certifications, GIAC, or similar credentials.
• Experience with Microsoft security technologies, including Microsoft Entra ID, Intune, Active Directory, Microsoft 365, Microsoft Defender, or similar platforms.
• Familiarity with cybersecurity frameworks, regulatory requirements, compliance activities, audits, or security assessments.
• Experience with CrowdStrike Falcon, SIEM platforms, endpoint detection and response (EDR), or related security technologies.

Technologies

• CompTIA Security+, CySA+, GIAC
• Microsoft Entra ID, Intune, Active Directory, Microsoft 365, Microsoft Defender
• CrowdStrike Falcon
• SIEM, endpoint detection and response (EDR)

Reporting and location

• Reports to the Director of Infrastructure and Security.
• Full-time role; onsite in Raleigh, NC.
• This position is preferably based in Parker Poe’s Charlotte, NC office, though candidates may also be based in the firm’s Raleigh, NC or Columbia, SC offices.
• May require occasional on-call coverage and work outside regular business hours to support security incidents, maintenance activities, and other business needs.

Traits for success

• A naturally curious investigator who enjoys analyzing security events, identifying patterns, and determining root causes.
• A detail-oriented problem solver who can balance priorities and apply both analytical thinking and practical judgment.
• A collaborative partner who works with Infrastructure, Applications, Service Desk, and other technology teams to strengthen controls.
• A clear and confident communicator who can explain security findings, risks, and recommendations to technical and non-technical audiences.
• A continuous learner who stays informed on emerging threats, evolving technologies, and cybersecurity best practices.