Sr. Information Security Analyst

Johnson & Quin, LLC; Niles (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Johnson & Quin, LLC is seeking a Senior Information Security Analyst to protect organizational systems and data by supporting security operations, risk management, and controls. You will perform advanced analysis and lead responses to security events, driving risk reduction and the maturity of the information security program.

The position collaborates across technical and business teams to identify, prioritize, and address security risks, contributing to ongoing program maturity and regulatory

Responsibilities

• Monitors, analyzes, and responds to security events and alerts across security platforms (e.g., SIEM, EDR, email security, network tools)
• Investigates suspicious activity, determines root cause, and coordinates remediation per Company policy
• Tunes and optimizes detection capabilities to reduce false positives
• Develops automation to improve efficiency of security operations
• Coordinates with security vendors to troubleshoot issues and improve tool effectiveness
• Participates in incident response activities including containment, eradication, and recovery
• Documents incidents, actions taken, and lessons learned
• Maintains incident response procedures and playbooks
• Coordinates with external vendors during investigations
• Manages vendor relationships and serves as a point of contact for support

Job description

The Senior Information Security Analyst protects Company organizational systems and data by supporting and enhancing security operations, risk management, and security controls. This role performs advanced analysis and responds (or leads response) to security events, drives risk reduction, supports compliance efforts, and contributes to the ongoing maturity of the organization’s information security program.

The position operates with a high degree of independence and collaborates across technical and business teams to identify, prioritize, and address security risks.

Security Operations & Monitoring

• Monitors, analyzes, and responds to/leads security events and alerts across security platforms (e.g., SIEM, EDR, email security, network tools)
• Investigates suspicious activity, determines root cause, and coordinates remediation efforts per Company policy
• Tunes and optimizes detection capabilities to improve alert quality and reduce false positives
• Develops and implements automation to improve efficiency and consistency of security operations (e.g., scripting, workflow automation)
• Coordinates with security vendors to troubleshoot issues and improve tool effectiveness
• Participates in/leads incident response activities, including containment, eradication, and recovery
• Documents incidents, actions taken, and lessons learned
• Assists in maintaining and improving internal incident response procedures and playbooks
• Coordinates with external vendors or partners as needed during incident investigations

Vulnerability, Patch & Risk Management

• Conducts vulnerability scanning and risk assessments across systems and environments
• Prioritizes remediation efforts based on risk and business impact
• Coordinates patch management activities with IT teams to ensure timely remediation of vulnerabilities
• Tracks and reports on remediation progress, including vulnerability and patch status across systems
• Works with internal teams and external vendors to support remediation efforts

Security Controls & Engineering Support

• Evaluates and recommends improvements to existing security controls and processes
• Assists in implementation, configuration, and optimization of security technologies
• Supports secure design and configuration of systems in partnership with IT teams
• Identifies opportunities to automate repetitive security tasks and improve operational efficiency
• Participates in evaluation and selection of security tools and vendors
• Supports internal and external audits (e.g., SOC 2, ISO) by gathering evidence and validating controls
• Develops, maintains, and updates security documentation, including policies, standards, procedures, and operational playbooks
• Helps ensure alignment with applicable regulatory and industry frameworks

Vendor & Third-Party Coordination

• Manages day-to-day relationships with security vendors and service providers
• Serves as a point of contact for vendor support, escalations, and technical discussions
• Monitors vendor performance to ensure services meet organizational expectations
• Assists in evaluating new vendors and solutions based on risk, effectiveness, and business needs
• Partners with IT, infrastructure, and business teams to identify and mitigate security risks
• Provides guidance on security best practices and control implementation
• Develops and delivers security awareness training programs to promote secure practices across the organization

Additional Responsibilities

• Participates in security initiatives and special projects as assigned
• Stays current on emerging threats, vulnerabilities, and security technologies
• Adheres to all organizational policies, procedures, and compliance requirements
• Demonstrates behavior consistent with Company Values and the Code of Conduct.
• Learns and adheres to Company rules and established policies for workplace health and safety.
• Adheres to all other Company policies and procedures.
• Completes all required compliance training on time and in good faith.