Information Security Analyst

Information Security Analyst<br /><br />Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk.<br />The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment.<br />Security Operations &amp; Incident Response<br /><br />Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity.<br />Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up.<br />Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives.<br />Maintain incident response plans, investigation procedures, escalation paths and case documentation.<br />Cloud, Identity &amp; Secure Access<br /><br />Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity.<br />Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes.<br />Support Zero Trust and secure access services for private applications.<br />Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services.<br />Data Protection, Human Risk &amp; Insider Risk<br /><br />Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing.<br />Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories.<br />Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information.<br />Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting.<br />Endpoint, Network &amp; Application Security<br /><br />Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines.<br />Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching.<br />Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements.<br />Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner.<br />Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions.<br />Resilience, Governance &amp; Continuous Improvement<br /><br />Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements.<br />Maintain policies, standards, procedures, diagrams, and inventories.<br />Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations.<br />Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents.<br />Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services.<br />Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews.<br />Job Requirements<br />Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.<br />Three to five years of experience in security operations, cloud security, infrastructure security, or a comparable role.<br />Hands-on experience investigating alerts and working across endpoint, identity, email, network, cloud, and data security controls.<br />Experience with vulnerability assessment, remediation tracking, patch management, incident response, and security control validation.<br />Understanding of data discovery, classification, data loss prevention, sensitive-information handling, and insider-risk concepts.<br />Ability to explain technical findings, business impact, and recommended actions to both technical and non-technical audiences.<br />Strong judgment, discretion, documentation, analytical thinking, and the ability to manage multiple priorities.<br />Preferred Qualifications<br />Experience in a regulated environment and familiarity with security or compliance frameworks such as NIST, MITRE ATT&amp;CK, SOC 2, or HITRUST.<br />Experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications. Working knowledge of cloud security, identity governance, and hybrid infrastructure.<br />Familiarity with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration.<br />Experience with scripting or security analytics using PowerShell, query languages, or comparable automation methods.<br />Relevant industry or cloud security certifications<br /><br />