Security Analyst

Jobtailor; Santa Monica (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor in Santa Monica, CA seeks an Information Security Analyst to identify threats, implement secure configurations, and drive security operations across IT and business units.

Responsibilities include strengthening vulnerability management, auditing security tools, and producing monthly security metrics. The role requires strong communication and CISSP or equivalent credentials, with a focus on automation and cross‑functional collaboration.

Qualifications

• Bachelor’s degree or equivalent.

Responsibilities

• Identify new threats to IT systems and create rules to identify, prevent and remediate.
• Expand security auditing and ensuring the proper ongoing operations of security tools.
• Providing internal information security consulting for other business and IT projects. This includes identifying, documenting and implementing secure configurations and architectures.
• Assist with the creation and maintenance of security policies, standards, guidelines and other documentation for IT and business audiences.
• Responsible for security metrics on a monthly basis to ensure the proper service levels are maintained.
• Support incident response lifecycle including identification, triage, remediation and communications for security breaches and malware infections.
• Identify latest security vulnerabilities, malware, breaches, and industry news which could affect the firm.
• Maintain vulnerability management process including identification, rating, remediation and monitoring.
• Provide additional coverage for approvals and notifications to other IT groups for critical time‑sensitive operations including firewall changes, password reset approvals, and application vetting.
• Assist with automation of security processes, integration of security platforms, and creation of tools.
• Ongoing reviews of access controls by investigating improper access; revoking access; reporting violations; monitoring requests; recommending improvements.
• Provide technical leadership for incident response capabilities including malware analysis, breach investigation, and remediation efforts.
• Create internal training materials and other items to support the advancement of information security within the firm.
• Maintain awareness of industry trends and their advantages with the ability to make recommendations for improving technology used by the firm.
• Participate in and/or manage cross‑functional team projects to implement new or updated technology.
• Cross‑train other IT staff in security best practices, use or maintenance of technology.
• Effectively manage small projects.
• Display professionalism, quality service and a "can do" attitude to internal members/departments of the firm as well as external clients and vendors via electronic and print correspondence, over the telephone and in‑person.
• Provide information security knowledge transfer to other IT staff and business.
• Assume additional responsibilities as assigned.

Skills

Communication skills

Analytical thinking

Problem solving

Customer service

Attention to detail

Education

Bachelor’s Degree in Information Security or related field

CISSP or Equivalent

Tools

Splunk

Sentinel

Cisco

Palo Alto Networks

Tenable

Rapid7

Azure

AWS

Windows security

Mac security

Linux security

Job description

Responsibilities

• Identify new threats to IT systems and create rules to identify, prevent and remediate.
• Expand security auditing and ensuring the proper ongoing operations of security tools.
• Providing internal information security consulting for other business and IT projects. This includes identifying, documenting and implementing secure configurations and architectures.
• Assist with the creation and maintenance of security policies, standards, guidelines and other documentation for IT and business audiences.
• Responsible for security metrics on a monthly basis to ensure the proper service levels are maintained.
• Support incident response lifecycle including identification, triage, remediation and communications for security breaches and malware infections.
• Identify latest security vulnerabilities, malware, breaches, and industry news which could affect the firm.
• Maintain vulnerability management process including identification, rating, remediation and monitoring.
• Provide additional coverage for approvals and notifications to other IT groups for critical time‑sensitive operations including firewall changes, password reset approvals, and application vetting.
• Assist with automation of security processes, integration of security platforms, and creation of tools.
• Ongoing reviews of access controls by investigating improper access; revoking access; reporting violations; monitoring requests; recommending improvements.
• Provide technical leadership for incident response capabilities including malware analysis, breach investigation, and remediation efforts.
• Create internal training materials and other items to support the advancement of information security within the firm.
• Maintain awareness of industry trends and their advantages with the ability to make recommendations for improving technology used by the firm.
• Participate in and/or manage cross‑functional team projects to implement new or updated technology.
• Cross‑train other IT staff in security best practices, use or maintenance of technology.
• Effectively manage small projects.
• Display professionalism, quality service and a "can do" attitude to internal members/departments of the firm as well as external clients and vendors via electronic and print correspondence, over the telephone and in‑person.
• Provide information security knowledge transfer to other IT staff and business.
• Assume additional responsibilities as assigned.

Requirements

• Bachelor’s Degree or equivalent.
• Minimum of 3 years’ experience working in the capacity of an Information Security Analyst.
• CISSP or equivalent preferred.
• Expert knowledge in IT Security frameworks and solutions.
• Active participation in IT Security Forums inside/outside of the Legal Industry.
• Excellent technical communication skills with a strong desire to achieve customer satisfaction; must be able to communicate effectively across entire organizations.
• Operating knowledge of security configurations with respect to one or more of the following security products:
  • SIEM: Splunk, Sentinel
  • Firewalls: Cisco, Palo Alto Networks
  • IDS/IPS: Cisco, Palo Alto Networks
  • NAC: Cisco, Aruba
  • Vulnerability Management: Tenable, Rapid7
• Operating knowledge of security issues associated with one or more of the following cloud platforms: Azure, AWS.
• Strong security knowledge of O/S (desktop and server) Security – Windows, Mac, Linux.
• Strong security knowledge of browser security issues (Edge, Chrome).
• Ability to learn new technologies and security features.
• Excellent analytical, problem‑solving and troubleshooting skills.
• Excellent organizational, interpersonal, communication and customer service skills.
• Knowledge of ITIL Service Management principles.

Core Competencies

Demonstrates expertise in IT Security frameworks and solutions, with a strong focus on incident response, vulnerability management, and security policy development. Proficient in security automation and integration of security platforms, ensuring effective communication and collaboration across teams.

Highest‑signal resume keywords

• Information Security Analyst Experience
• CISSP Certification
• IT Security Frameworks Knowledge
• Security Automation Skills
• Vulnerability Management Expertise

Hard Skills

• IT Security Frameworks
• Incident Response
• Vulnerability Management
• Security Policy Development
• Malware Analysis
• Security Configurations
• Programming Languages: Python, Powershell, Node.js
• Security Automation: LogicApps, Power Automate, Splunk
• Operating Systems Security: Windows, Mac, Linux
• Cloud Platforms: Azure, AWS

Soft Skills

• Technical Communication
• Analytical Skills
• Problem Solving
• Organizational Skills
• Interpersonal Skills

Certifications & Qualifications

• Bachelor’s Degree
• CISSP or Equivalent

Industry Keywords

• Information Security
• Security Auditing
• Security Best Practices
• ITIL Service Management
• Legal Industry Security Standards

Tools & Technologies

• SIEM: Splunk, Sentinel
• Firewalls: Cisco, Palo Alto Networks
• IDS/IPS: Cisco, Palo Alto Networks
• NAC: Cisco, Aruba
• Vulnerability Management: Tenable, Rapid7