The Security Analyst II plays a key role in operating, improving, and maturing North Risk’s security program, with a focus on detection, investigation, vulnerability management, access governance, endpoint and email security, and compliance support.
Requirements
- A combination of education and experience generally attained through an associate’s degree (in Information Technology, Cybersecurity, Networking, or related field strongly preferred), and a minimum of 5 years of progressive experience in cybersecurity, security operations, or related IT security roles
- Strong understanding of security fundamentals including: Detection response, least privilege and access governance, endpoint and email security, vulnerability management, and incident response principles
- Hands-on experience with Microsoft security technologies (Defender, Intune, Entra ID) or equivalent enterprise platforms
- Experience working in ticketing systems (e.g., ServiceNow) with strong documentation
- Ability to analyze technical data, investigate security events, and communicate findings clearly
- Experience supporting compliance or audit requirements in regulated environments
- Experience with detection tuning, alert optimization, or SIEM adjacent workflows, including email security and phishing response platforms
- Familiarity with insurance, financial services, or other regulated industries
- Ability to communicate technical findings to both technical and non-technical audiences, including written summaries for leadership
- Experience with PowerShell or other scripting languages for tasks automation is preferred
- Familiarity with NIST Cybersecurity Framework (CSF) 2.0 or similar security frameworks
- Certifications such as Security+, CySA+, SSCP, or equivalent is preferred, but not required
- Experience contributing to security architecture or control design decisions is preferred, but not required
Benefits
- health
- dental
- vision
- short-term disability
- long-term disability
- life
- long-term care
- 401(k) plan