Security Analyst

• Monitor, analyze, and respond to security incidents and threats.
• Implement security controls and countermeasures to mitigate identified risks.
• Assist with security and risk audits and assessments.
• Analyze security alerts and incidents, determine root cause, scope, and impact, and contain, mitigate, and remediate threats.
• Administer the security awareness program, including phishing simulations, employee training, and investigation of reported phishing threats.
• Participate in security assessments and penetration testing; document vulnerabilities and assist with remediation.
• Maintain and update the Risk Register and POA&M, tracking risks, remediation activities, and status updates.
• Support vulnerability management by identifying, prioritizing, tracking, and reporting vulnerabilities and remediation activities according to MTTR standards.
• Assist with third-party risk management, including vendor onboarding assessments and periodic risk reviews.
• Develop, review, and maintain cybersecurity policies and procedures aligned with NIST and applicable standards and regulatory requirements.
• Participate in evaluating and deploying new security technologies and solutions.
• Research emerging cyber threats, vulnerabilities, and security technologies.
• Perform other duties as assigned.

Cybersecurity Analyst

• Analyze cybersecurity data to identify trends, patterns, emerging threats, and areas of risk
• Evaluate risk across cybersecurity domains
• Assess technologies, tools, and platforms for potential security concerns and control gaps
• Develop executive-ready presentations, reports, and dashboards translating technical findings into business-focused recommendations
• Present cybersecurity risks and mitigation recommendations to business and technology stakeholders
• Anticipate questions, defend findings, and influence decision-making through data-driven analysis
• Partner across cybersecurity and technology teams to proactively reduce risk and strengthen security posture
• Identify opportunities and strategies for continuous cyber risk-based improvement

Lead Information Security Analyst

• Maintain awareness of critical information security vulnerabilities, threats, and exploits
• Independently investigate and respond to moderately complex security events
• Perform root cause analysis to identify threats, contain risk, and improve detection and response capabilities
• Monitor internal and external networks, systems, and applications for security anomalies, suspicious activity, attacks, and potential incidents
• Respond to cyber incidents using security tools
• Build knowledge and experience in forensics, networking, servers, coding, and related areas to determine malicious actors' tactics, techniques, and procedures
• Improve existing detection capabilities and security controls based on incident-response discoveries
• Document completed-alert findings and assist with incident documentation
• Serve as a resource to team members on escalated routine issues
• Identify, measure, monitor, and control risks associated with business activities according to risk and compliance policies

Security Analyst jobs in Arizona

Cybersecurity Analyst

Lead Information Security Analyst

Cloud Info Security Analyst – Intermediate Level