Security Analyst

• Monitor security dashboards, alerts, and logs across AWS, Microsoft 365, Google Workspace, and Grafana; triage, document disposition, and escalate per established runbooks
• Run recurring vulnerability scans across cloud, endpoint, and application surfaces; maintain remediation tracking and verify findings are closed within SLAs
• Triage employee-reported phishing and security questions and escalate confirmed issues
• Support incident response as first responder and scribe; capture timelines, preserve evidence, maintain ticket hygiene, and draft post-incident summaries
• Maintain security tooling coverage including MFA enrollment, endpoint agents, logging agents, and email security
• Execute user access provisioning, role changes, and deprovisioning for onboarding and termination
• Run quarterly user access reviews and document exceptions and completed evidence
• Enforce least-privilege and role-based access practices; maintain privileged, service, and third-party access records
• Collect and maintain audit evidence for SOC 2 and PCI DSS
• Support SOC 2 and PCI DSS audit cycles and auditor communications
• Maintain the policy and procedure library, review calendar, approval records, and employee attestations
• Support vendor risk assessments and maintain the vendor inventory
• Perform assigned internal control testing and document results
• Draft customer and carrier security questionnaire responses for review
• Maintain the asset inventory and security awareness training program
• Build and maintain security and compliance metrics reporting
• Write and maintain runbooks, SOPs, and checklists
• Partner with IT, Engineering, Compliance, Legal, and Service teams
• Identify repetitive tasks that can be automated or streamlined and propose improvements
• Perform other duties as requested, directed, or assigned

Security Analyst jobs in Utah

Junior Information Security – Compliance Analyst