Note: The job is a remote job and is open to candidates in USA. ALAW is a nationwide law firm providing legal representation and related services to financial institutions. The IT Security Analyst supports day-to-day security operations, including alert triage, phishing response, vulnerability management, endpoint and cloud security reviews, incident response support, evidence collection, and security reporting.
Responsibilities
- Monitor and triage security alerts involving suspicious sign-ins, malware, phishing, endpoint activity, email threats, administrative changes, and unusual network or cloud activity
- Investigate user-reported phishing messages, analyze relevant indicators, identify similar messages, and coordinate quarantine or removal when appropriate
- Support identity and access reviews, including inactive, vendor, and privileged accounts; MFA enrollment; Conditional Access coverage; suspicious sign-ins; and mailbox forwarding or inbox rules
- Monitor endpoint security coverage and compliance, identify devices with missing or outdated security tools, and coordinate remediation with IT Operations
- Review vulnerability and patch-compliance reports, prioritize findings based on risk, create remediation tickets, and validate completion through rescans or supporting evidence
- Review Microsoft 365, Azure, and AWS security findings, including external sharing, guest access, configuration exceptions, logging, encryption, and least-privilege controls
- Assist with security awareness training, phishing simulations, employee follow-up, and reporting on participation and phishing trends
- Support incident response by collecting evidence, documenting timelines, assisting with approved containment activities, and tracking action items through closure
- Maintain organized security records and assist with evidence collection for audits, client questionnaires, compliance reviews, and governance reporting
- Support physical security administration and periodic access reviews for systems such as Brivo and ADT
- Prepare concise security updates, alert summaries, incident documentation, and compliance reports for leadership review
Skills
- One to three years of experience in cybersecurity, IT support, security operations, infrastructure support, audit support, or a related technical role
- Working knowledge of Windows endpoints, Microsoft 365, phishing analysis, vulnerability management, security alerts, and ticketing workflows
- Ability to review logs and technical findings, follow established procedures, document conclusions, and escalate concerns appropriately
- Strong attention to detail and organizational skills, particularly when maintaining evidence for audit, compliance, and governance purposes
- Effective written and verbal communication skills
- Experience with Microsoft Sentinel, Microsoft Defender, Entra ID, Intune, Proofpoint, SentinelOne, Nessus, Fortinet, DNSFilter, Brivo, ADT, or comparable technologies
- Familiarity with security frameworks or regulatory standards such as NIST CSF, CIS Controls, SOC 2, or the GLBA Safeguards Rule
- Experience supporting phishing investigations, vulnerability remediation, access reviews, endpoint security, cloud security, or physical access administration
- Security+, CySA+, SC-200, AZ-900, MS-900, or a comparable certification is preferred but not required
Benefits
- Medical, dental, and vision Insurance
- 401(k) plan with company match
- Company-paid life insurance, short-term and long-term disability coverage
- Generous PTO and paid holidays
- Professional development opportunities
- Employee recognition programs
- Wellness resources and employee assistance program (EAP)
- Employee referral program with bonus incentives
- Tampa/Remote work location
Company Overview