Security Analyst II

Amerisure; Farmington Hills (MI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Amerisure is seeking a Security Analyst II to support its Farmington Hills headquarters. The role focuses on threat detection, vulnerability assessments, and implementing security controls to protect digital information across the organization.

The ideal candidate will monitor SIEM tools, perform risk assessments, respond to incidents, and collaborate with IT and business units to mitigate risks. A strong security foundation and relevant certifications are preferred.

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• 2+ years security experience with relevant tools and concepts.
• Knowledge of NIST, ISO 27001, COBIT frameworks.
• Understanding SSL/TLS, SSH, PKI cryptography.
• Experience with incident response and breach containment.
• Experience with SIEM systems (FortiSIEM).
• Knowledge of Windows, Linux and macOS security configurations.
• Cloud security in AWS/Azure and basic DevSecOps practices.
• Experience with third-party cyber risk assessments.

Responsibilities

• Monitor SIEM tools for alerts and incidents.
• Perform risk assessments of third-party vendors.
• Lead incident response and remediation efforts.
• Generate security reports for management and audits.
• Support regulatory compliance activities and cybersecurity awareness.
• Provide level 2 on-call security support.

Skills

SIEM monitoring

Threat detection

Incident response

Risk assessments

Firewall/VPN/IDS/IPS

Cloud security (AWS/Azure)

EDR tools

Cryptography concepts

Security governance frameworks

On-call support

DevSecOps practices

IAM, SSO, MFA (Okta, SailPoint)

Regulatory/compliance awareness

Education

Bachelor’s degree or equivalent

Tools

FortiSIEM

Windows/Linux/macOS security

Job description

Amerisure creates exceptional value for its partners, policyholders, and employees. As a property and casualty insurance company, Amerisure’s promise to our partner agencies and policyholders begins with a comprehensive line of insurance products designed to protect businesses, as well as the health and safety of every employee. With an A.M. Best “A” (Excellent) rating, Amerisure serves mid-sized commercial enterprises focused in construction, manufacturing and healthcare. Ranked as one of the top 100 Property & Casualty companies in the United States, we proudly manage nearly $1 Billion of Direct Written Premium and maintain $1.21 billion in surplus.Amerisure is currently recruiting for a Security Analyst II that can do a 3-day hybrid approach to support our IT team in our Farmington Hills Headquarters. The ideal candidate will also possess the following skill set.Summary StatementThe Security Analyst II is responsible for monitoring, analyzing, and responding to security incidents andthreats to safeguard Amerisure's digital information. This role focuses on threat detection, vulnerabilityassessments, and implementing security protocols to protect the network, files, user accounts, andsensitive information. The Security Analyst provides knowledge in cyber security governance and cyberthreat management, staying informed on the evolving threat landscape and collaborating with businessunits and IT to identify, prioritize, and mitigate risks effectively.Essential Tasks/Major DutiesMonitor SIEM (Security Information and Event Management) tools for alerts and incidents.Perform risk assessments of third-party vendors.Perform incident response and assist in the remediation process.Generate security reports for management and compliance purposes.Support compliance efforts, such as audits and regulatory requirements.Support cybersecurity awareness program.Provide level 2 on-call security support.Knowledge, Skills & AbilitiesBachelor’s degree or equivalent combination of education and experience.2 years security experience.Working knowledge of firewalls, VPNs, IDS/IPS, network monitoring, and traffic analysis.Knowledge of frameworks such as NIST, ISO 27001, and COBITUnderstanding cryptographic techniques and protocols (SSL/TLS, SSH, PKI).Experienced in cybersecurity incident response, breach containment and recovery processes.Staying current with evolving threats, technologies, and security protocols.Understanding types of malware, detection techniques, and analysis tools.Experience with Security Information and Event Management (SIEM) systems (e.g., FortiSIEM).Knowledge of Windows, Linux, and macOS, including their security configurations.Implement detailed instructions for securing cloud environments like AWS and AzureExperienced in conducting third-party cyber risk assessments.Can follow DevSecOps practices and make improvements to existing process.Knowledge of authentication, authorization, SSO, MFA (Okta) and IAM (SailPoint)Managing endpoint detection and response (EDR) tools.Apply project management, Agile practices and principles and lead stand-ups.Clear articulation of security policies, risks, and recommendations to non-technical stakeholders.Working closely with IT teams, developers, and management.Provide on-going, effective cybersecurity awareness program for the entire organization.Professional Certification (CISSP; CEH; CISM; CRISC; CompTIA Security+)Just as we are committed to creating exceptional value for our Partners For Success agencies and policyholders, Amerisure also remains committed to being an employer of choice. We reinforce this commitment by adhering to an Employee Value Proposition that, in part, is provided through a competitive total rewards package. This package includes competitive base pay, performance-based incentive pay, comprehensive health and welfare benefits, a 401(k) savings plan with profit sharing, and generous paid time off programs. We also offer flexible work arrangements to promote work-life balance. Recognized as one of the Best and Brightest Companies to Work For in the Nation and one of Business Insurance magazine’s Best Places to Work in Insurance, we provide a workplace that fosters excellence and professional growth. If you are looking for a collaborative and rewarding career, Amerisure is looking for you.Amerisure Mutual Insurance Company is an Equal Employment Opportunity employer. Amerisure provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex (to include sexual orientation and gender identity), national origin, age, disability, genetic information, veteran status, or any other protected characteristic under applicable federal, state, or local laws. Amerisure complies with all applicable laws governing nondiscrimination in employment in all locations where the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Amerisure prohibits harassment or discrimination of any kind and is committed to maintaining a workplace free from unlawful harassment or discrimination. Amerisure prohibits retaliation against anyone who reports discrimination, participates in an investigation, or opposes unlawful practices. Any improper interference with an employee’s ability to perform their job duties may result in disciplinary action, up to and including termination.