Senior Information Security Analyst

Title: Senior IT Security Analyst

Location: Houston, Texas | Onsite

The Senior IT Security Analyst is responsible for assessing cyber risk and monitoring threat activity by analyzing security events, vulnerability data, threat intelligence, and the effectiveness of security controls across infrastructure, applications, cloud, endpoint, and data environments. The analyst will work closely with cyber engineering, cyber architecture, and risk management teams to support detection, investigation, and response efforts, while contributing to a broader understanding of the organization’s overall risk posture and threat landscape.

The position also involves collaboration with IT and business teams to support remediation efforts, improve security visibility, and strengthen day‑to‑day security operations.

Key Responsibilities
• Participate in cyber risk and threat analysis activities, including risk assessments, threat monitoring, vulnerability analysis, and evaluation of security control effectiveness
• Analyze security alerts, threat intelligence, vulnerability data, and logs to identify potential threats, control gaps, and emerging risks
• Document risk findings, threat activity, investigation results, and remediation recommendations in accordance with established standards
• Support threat investigations and incident response efforts through analysis, evidence collection, and impact assessment
• Conduct and support vulnerability and threat assessments, including risk tracking and validation of remediation efforts
• Assist with third‑party and vendor risk assessments by reviewing documentation and identifying potential risk exposures
• Develop and document assessment procedures, test cases, and validation steps used to evaluate security controls
• Support the use and maintenance of security and risk tools (e.g., SIEM, vulnerability scanners, threat intelligence platforms, GRC tools)
• Identify opportunities to improve threat visibility, risk detection, and analytical workflows
• Perform root cause analysis for security incidents, control failures, or recurring threat patterns
• Adhere to change management, incident handling, and security governance policies
• Monitor environments during major changes or maintenance activities for potential risk or threat impact
• Prepare risk and threat summaries for review by senior analysts, managers, and cross‑functional teams
• Collaborate closely with cyber engineering, architecture, and risk teams to support remediation and security control improvements

Qualifications
• College degree or technical school degree preferred
• Relevant cybersecurity certifications preferred (e.g., Security+, CySA+, GSEC, GCIA, or similar)
• Foundational knowledge and experience in:
• Cyber risk and threat analysis concepts
• Security monitoring, threat detection, and vulnerability assessment
• Common security controls across infrastructure, application, cloud, endpoint, and data environments
• Working knowledge of security tools and platforms such as SIEM solutions, vulnerability scanners, threat intelligence platforms, or GRC tools
• Familiarity with common threat frameworks and methodologies (e.g., MITRE ATT&CK)
• Experience working in enterprise IT or security environments with diverse technologies and integrations

Experience Requirements
• 2–5 years of relevant professional experience, including:
• Cyber threat analysis, vulnerability management, or security operations support
• Reviewing and analyzing security alerts, logs, and threat intelligence
• Documenting risk findings, investigations, and remediation recommendations
• Experience supporting incident response, investigations, or post‑incident analysis preferred
• Experience assisting with third‑party or vendor risk assessments preferred

Additional Skills
• Strong analytical and problem‑solving skills with attention to detail
• Ability to identify patterns, anomalies, and emerging threats
• Strong written communication skills with the ability to document findings clearly for technical and non‑technical audiences
• Self‑motivated with the ability to work independently while following established processes
• Strong organizational and time management skills with the ability to manage multiple priorities
• Willingness and ability to learn new tools, technologies, and threat techniques as the threat landscape evolves
• Team‑oriented mindset with the ability to collaborate effectively to support overall security and risk management objectives