IT Security Analyst II

Job Summary:

The IT Security Analyst II is responsible for advanced monitoring, analysis, and response to security events across the iQor enterprise. This role supports the identification, containment, and mitigation of security incidents while maintaining and enhancing the organization’s security posture. The analyst works independently and collaboratively with IT, compliance, and business teams to evaluate security alerts, refine detection logic, ensure health of security systems, and drive continuous improvement in threat detection and response capabilities.

Responsibilities:

• Perform advanced monitoring and analysis of security events across enterprise tools (SIEM, EDR, firewall, IDS/IPS, and email gateways).
• Conduct initial triage, investigation, and correlation of security incidents and alerts, escalating as necessary.
• Generate, review, and interpret detailed security logs and event data to identify anomalies or potential threats.
• Produce and automate ad hoc and recurring reports to track trends, metrics, and KPIs related to security posture.
• Create and manage incident tickets with accurate documentation, evidence, and recommended remediation steps.
• Execute and validate daily and weekly health checks of enterprise security systems and controls.
• Collaborate with senior analysts to enhance detection rules, response procedures, and correlation logic in security tools.
• Participate in incident response activities, assisting in containment, eradication, and recovery processes.
• Work closely with infrastructure and application teams to ensure timely closure of vulnerabilities and misconfigurations.
• Support security audits, compliance reviews, and policy enforcement efforts.
• Mentor and assist junior analysts by sharing knowledge, refining procedures, and promoting consistent analysis practices.
• Identify opportunities for automation and efficiency within monitoring and response processes.
• Contribute to threat intelligence integration, leveraging indicators of compromise (IOCs) to improve detection.
• Support the development of standard operating procedures (SOPs), playbooks, and documentation for security operations.
• Drive continuous improvement initiatives by analyzing trends, identifying root causes, and recommending process enhancements.
• Communicate effectively with stakeholders regarding incident status, risk levels, and mitigation actions.
• Maintain discretion and confidentiality in all matters pertaining to IT systems, security data, and proprietary information.
• Demonstrate a strong commitment to customer service and effective problem-solving.
• Perform other duties and special projects as assigned.

Skills Requirements:

• 3–5 years of experience in IT or information security, with at least 2 years in a dedicated security operations, incident response, or monitoring role.
• Strong understanding of network security concepts, endpoint protection, SIEM tools, and threat analysis methodologies.
• Hands-on experience with one or more of the following technologies: Splunk, CrowdStrike, Palo Alto, Cisco SecureX, Microsoft Defender, or similar.
• Solid knowledge of security frameworks and standards such as NIST, ISO 27001, or CIS Controls.
• Working knowledge of incident response lifecycle, log analysis, and forensic principles.
• Ability to interpret system logs, correlate data across multiple sources, and identify potential indicators of compromise.
• Excellent analytical and problem-solving skills, with the ability to act decisively in high-pressure situations.
• Strong written and verbal communication skills for technical documentation and stakeholder reporting.
• Security certifications such as CompTIA Security+, CySA+, CEH, or Splunk Certified Power User preferred.
• Familiarity with scripting or automation (PowerShell, Python) is a plus.

Education Requirements:

• Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, or a related technical discipline required.
• Equivalent combination of education, certifications, and relevant experience may be considered.

Physical Requirements:

Occasionally exert up to 10 lbs. of force to push, pull, lift or otherwise move objects. Have visual acuity to perform activities such as preparing and analyzing data; and/or viewing a computer terminal. Type and/or sit for extended periods of time. Consistent attendance is an essential function of the job.