Security Operations & GRC Analyst

Koitecc Solutions; Duluth (GA); On-site; USD 70,000 - 95,000; Full time

Job summary

Koitecc Solutions is seeking a detail‑oriented Security Analyst to monitor security tooling, triage alerts, and respond to incidents under the guidance of the Senior IT Security Manager.

The role also drives risk and compliance activities, including risk register management, control gap assessments, and vendor risk reviews, with cross‑functional collaboration across IT, Legal, Compliance, HR, and business units.

Qualifications

• Bachelor's Degree in Information Security, Information Technology, or related field.
• At least 2 years in security analyst or related roles.
• Experience with SIEM and EDR/XDR tools.
• Familiarity with NIST CSF, CIS Controls, ISO 27001, PCI DSS.
• Strong written communication and reporting skills.
• Experience performing alert triage and escalation.

Responsibilities

• Monitor security tooling and alert queues for malicious activity.
• Perform initial triage to determine severity and scope.
• Provide first-tier response following playbooks.
• Review phishing emails and take protective action.
• Maintain enterprise security records in ticketing systems.
• Coordinate access reviews with system owners.
• Support audit, certification, and regulatory activities.
• Present risk status to Senior IT Security Manager.
• Assist with vulnerability remediation tracking.
• Travel as needed to sites across the United States.

Skills

Security monitoring

Phishing analysis

Incident response

Access reviews

Vendor risk review

Risk management

Control assessments

Audit support

Security reporting

Tabletop exercises

Regulatory knowledge

Excellent writing

Education

Bachelor's Degree in Information Security/IT or related field

Tools

SIEM

EDR/XDR tooling

Ticketing system (ServiceNow)

Job description

Koitecc Solutions is seeking a detail‑oriented Security Analyst to monitor security tooling, triage alerts, and respond to incidents under the guidance of the Senior IT Security Manager.

The role also drives risk and compliance activities, including risk register management, control gap assessments, and vendor risk reviews, with cross‑functional collaboration across IT, Legal, Compliance, HR, and business units.