Senior IT Security Analyst - Azure Cloud & Threat Intel (Remote)

UBC; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

401K with company match

Flexible work environment

Discretionary PTO

Paid Holidays

Employee assistance programs

Medical, Dental, and vision coverage

HSA/FSA

Wellness program

Adoption assistance

Short term disability

Long term disability

Life insurance

Job summary

UBC is seeking a hands-on Senior IT Security Analyst to maintain and improve our Cybersecurity program across Azure Cloud and on-prem environments. You will perform threat intelligence analysis, assist the incident response team, and ensure security and compliance of information assets per ISO 27000, HIPAA, GDPR and CCPA.

You will collaborate with IT and development teams to implement secure configurations and policies, conduct risk assessments and threat modelling, and drive vulnerability

Qualifications

• Bachelor’s degree in a computer-related field or 4–6 years equivalent experience.
• 3–5 years of IT security experience, preferably in Azure cloud.
• Certification in information security (GIAC - GSEC, Security+, CISSP, CySA+ or equivalent) preferred.
• Familiarity with external regulations, e.g., GDPR, 21CFR part 11, HIPAA, Sarbanes-Oxley
• Strong understanding of information security principles and frameworks.
• Strong experience in vulnerability management, including scanning, remediation coordination, and verification.
• Hands-on experience with automated vulnerability scanning tools, including web application scanning solutions.
• Understanding of web application security concepts (OWASP Top 10) and common attack techniques.
• Familiarity with domain structures, user authentication, and digital signatures.
• Experience with on-premises and cloud security controls and systems (MS Intune, MS ATP, MS Purview, Active Directory, IAM).
• Strong documentation and communications skills.
• Experience in research and analyzing findings.
• Experience as part of an incident response team.
• Digital Forensics experience is a plus.
• Programming and scripting experience is a plus.
• Experience with cloud architecture is a plus.
• Experience or comprehension of AI tools and various uses is a plus.
• Demonstrated ability to coordinate with various teams for project/activity completion, work in a team environment, sharing workloads and responsibilities.
• Ability to work in a flexible environment where requirements and procedures continuously evolve.
• Ability to multi-task and manage time effectively.

Responsibilities

• Ensure security controls are deployed, operating effectively, and aligned with organizational security policies and standards.
• Monitor, review, analyze, and respond to security alerts generated from various security platforms.
• Tune and optimize security alerts to reduce false positives and improve detection effectiveness.
• Ensure assets are properly onboarded and reporting into required security monitoring and vulnerability management tools.
• Lead and support the vulnerability management lifecycle, including: conducting regular vulnerability scans using automated tools; analyzing scan results and prioritizing findings based on risk; working closely with infrastructure, application, and development teams to remediate vulnerabilities and validating fixes; perform and manage web application security scans, interpret findings, and provide clear remediation guidance to development teams.
• Monitor threat intelligence feeds and external advisories to identify emerging threats, vulnerabilities, or risks relevant to the organization.
• Participate in incident response activities, including identification, containment, eradication, and recovery efforts.
• Assess, develop, and apply updated or strengthened security measures to respond to changing threats, regulatory and business requirements, enhancing both cloud and on-premises security posture.
• Work with IT, engineering, and business teams to develop, review, and implement secure configurations, standards, and policies.
• Assists project teams in the implementation of security measures to meet UBC cybersecurity policies and external governances, e.g., HIPAA, GDPR, CCPA.
• Maintain accurate and up-to-date security documentation for systems, applications, and processes.
• Collaborate with other security team members on security initiatives and best practices
• Support annual security initiatives and defined deliverables aligned with the organization’s security roadmap.
• Participate in special projects and perform additional duties as assigned.

Skills

Threat intelligence analysis

Incident response

Security monitoring

Risk assessment

Communication & documentation

Team coordination

Adaptability

Multi-tasking

Education

GIAC/GSEC or CISSP or Security+ or CySA+ or equivalent certification

Tools

Azure Cloud

Active Directory

MS Intune

MS ATP

MS Purview

IAM

Job description

UBC is seeking a hands-on Senior IT Security Analyst to maintain and improve our Cybersecurity program across Azure Cloud and on-prem environments. You will perform threat intelligence analysis, assist the incident response team, and ensure security and compliance of information assets per ISO 27000, HIPAA, GDPR and CCPA.

You will collaborate with IT and development teams to implement secure configurations and policies, conduct risk assessments and threat modelling, and drive vulnerability