Sr. Cybersecurity Analyst

Direct Marketing Solutions, Inc.; Niles, Freedom (IL, PA); Ibrido; USD 110.000 - 160.000; Tempo pieno

Descrizione del lavoro

Direct Marketing Solutions, Inc. is seeking a Senior Information Security Analyst to protect organizational systems and data across security operations, risk management, and control programs.

The role offers hybrid work with on-site in Chicago metro (Niles) or Pittsburgh metro (Freedom) and requires collaborating with IT and business teams to manage security risks. The role involves monitoring security platforms, leading incident response, managing vulnerabilities, and supporting audits and

Competenze

• Bachelor’s degree or equivalent experience in cybersecurity or IT.
• 6+ years of experience in information security or related IT roles.
• Strong understanding of IT infrastructure, networks and protocols.
• Experience with security tools such as SIEM, EDR/XDR, and vulnerability management platforms.
• Familiarity with incident response processes and security operations workflows.
• Familiarity with cloud security concepts (Microsoft 365/Azure).
• Strong teaching, interpersonal, and communication skills.

Mansioni

• Monitor, analyze, and respond to security events across security platforms (SIEM/EDR).
• Lead incident response activities including containment, eradication, and recovery.
• Conduct vulnerability scanning and risk assessments; prioritize remediation by risk.
• Coordinate patch management with IT to remediate vulnerabilities.
• Evaluate and optimize security controls; assist in implementation and configuration of security tools.
• Support audits and compliance programs (SOC 2, ISO).
• Collaborate with IT, security, and business teams to mitigate risks.
• Develop security awareness training programs for the organization.

Conoscenze

Communication

Team collaboration

Teaching

Security awareness

Formazione

Bachelor’s degree in Cybersecurity or related field

Strumenti

SIEM

EDR/XDR

Vulnerability management

PowerShell

Python

Descrizione del lavoro

Description

This role will be based in either Chicago, IL metro area (Niles) or Pittsburgh, PA metro area (Freedom). It is a hybrid role with 3 days per week on-site and 2 days remote.

The Senior Information Security Analyst protects Company organizational systems and data by supporting and enhancing security operations, risk management, and security controls. This role performs advanced analysis and responds (or leads response) to security events, drives risk reduction, supports compliance efforts, and contributes to the ongoing maturity of the organization’s information security program.

The position operates with a high degree of independence and collaborates across technical and business teams to identify, prioritize, and address security risks.

Security Operations & Monitoring

• Monitors, analyzes, and responds to/leads security events and alerts across security platforms (e.g., SIEM, EDR, email security, network tools)
• Investigates suspicious activity, determines root cause, and coordinates remediation efforts per Company policy
• Tunes and optimizes detection capabilities to improve alert quality and reduce false positives
• Develops and implements automation to improve efficiency and consistency of security operations (e.g., scripting, workflow automation)
• Coordinates with security vendors to troubleshoot issues and improve tool effectiveness

Incident Response

• Participates in/leads incident response activities, including containment, eradication, and recovery
• Documents incidents, actions taken, and lessons learned
• Assists in maintaining and improving internal incident response procedures and playbooks
• Coordinates with external vendors or partners as needed during incident investigations

Vulnerability, Patch & Risk Management

• Conducts vulnerability scanning and risk assessments across systems and environments
• Prioritizes remediation efforts based on risk and business impact
• Coordinates patch management activities with IT teams to ensure timely remediation of vulnerabilities
• Tracks and reports on remediation progress, including vulnerability and patch status across systems
• Works with internal teams and external vendors to support remediation efforts

Security Controls & Engineering Support

• Evaluates and recommends improvements to existing security controls and processes
• Assists in implementation, configuration, and optimization of security technologies
• Supports secure design and configuration of systems in partnership with IT teams
• Identifies opportunities to automate repetitive security tasks and improve operational efficiency
• Participates in evaluation and selection of security tools and vendors

Governance, Risk & Compliance

• Supports internal and external audits (e.g., SOC 2, ISO) by gathering evidence and validating controls
• Develops, maintains, and updates security documentation, including policies, standards, procedures, and operational playbooks
• Helps ensure alignment with applicable regulatory and industry frameworks

Vendor & Third-Party Coordination

• Manages day-to-day relationships with security vendors and service providers
• Serves as a point of contact for vendor support, escalations, and technical discussions
• Monitors vendor performance to ensure services meet organizational expectations
• Assists in evaluating new vendors and solutions based on risk, effectiveness, and business needs

Collaboration & Communication

• Partners with IT, infrastructure, and business teams to identify and mitigate security risks
• Provides guidance on security best practices and control implementation
• Develops and delivers security awareness training programs to promote secure practices across the organization

Additional Responsibilities

• Participates in security initiatives and special projects as assigned
• Stays current on emerging threats, vulnerabilities, and security technologies
• Adheres to all organizational policies, procedures, and compliance requirements
• Demonstrates behavior consistent with Company Values and the Code of Conduct.
• Learns and adheres to Company rules and established policies for workplace health and safety.
• Adheres to all other Company policies and procedures.
• Completes all required compliance training on time and in good faith.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• 6+ years of experience in information security or related IT roles
• Understanding of IT infrastructure, including protocols, operating systems, and networks
• Experience with security tools such as SIEM, EDR/XDR, and vulnerability management platforms
• Understanding of incident response processes and security operations workflows
• Strong understanding of network, endpoint, and identity security principles
• Familiarity with patch management processes and security remediation workflows
• Experience with automation or scripting (e.g., PowerShell, Python) preferred
• Familiarity with cloud security concepts, particularly within Microsoft 365 and/or Azure environments
• Experience supporting audits and compliance programs
• Strong understanding of security frameworks such as NIST CSF, CIS Controls, or ISO 27001
• Strong teaching, interpersonal, and communication skills

Preferred Qualifications

• Relevant certifications (e.g., Security+, CySA+, CISSP, CISM, or equivalent)
• Familiarity with Microsoft Azure and Microsoft 365 security technology preferred
• Familiarity with securing Linux systems