IT Security Analyst

ALAW is a nationwide law firm providing legal representation and related services to financial institutions. The IT Security Analyst supports day-to-day security operations, including alert triage, phishing response, vulnerability management, endpoint and cloud security reviews, incident response support, evidence collection, and security reporting.

What you'll do:

• Monitor and triage security alerts involving suspicious sign-ins, malware, phishing, endpoint activity, email threats, administrative changes, and unusual network or cloud activity
• Investigate user-reported phishing messages, analyze relevant indicators, identify similar messages, and coordinate quarantine or removal when appropriate
• Support identity and access reviews, including inactive, vendor, and privileged accounts; MFA enrollment; Conditional Access coverage; suspicious sign-ins; and mailbox forwarding or inbox rules
• Monitor endpoint security coverage and compliance, identify devices with missing or outdated security tools, and coordinate remediation with IT Operations
• Review vulnerability and patch-compliance reports, prioritize findings based on risk, create remediation tickets, and validate completion through rescans or supporting evidence
• Review Microsoft 365, Azure, and AWS security findings, including external sharing, guest access, configuration exceptions, logging, encryption, and least-privilege controls
• Assist with security awareness training, phishing simulations, employee follow-up, and reporting on participation and phishing trends
• Support incident response by collecting evidence, documenting timelines, assisting with approved containment activities, and tracking action items through closure
• Maintain organized security records and assist with evidence collection for audits, client questionnaires, compliance reviews, and governance reporting
• Support physical security administration and periodic access reviews for systems such as Brivo and ADT
• Prepare concise security updates, alert summaries, incident documentation, and compliance reports for leadership review

What they're looking for:

• One to three years of experience in cybersecurity, IT support, security operations, infrastructure support, audit support, or a related technical role
• Working knowledge of Windows endpoints, Microsoft 365, phishing analysis, vulnerability management, security alerts, and ticketing workflows
• Ability to review logs and technical findings, follow established procedures, document conclusions, and escalate concerns appropriately
• Strong attention to detail and organizational skills, particularly when maintaining evidence for audit, compliance, and governance purposes
• Effective written and verbal communication skills
• Experience with Microsoft Sentinel, Microsoft Defender, Entra ID, Intune, Proofpoint, SentinelOne, Nessus, Fortinet, DNSFilter, Brivo, ADT, or comparable technologies
• Familiarity with security frameworks or regulatory standards such as NIST CSF, CIS Controls, SOC 2, or the GLBA Safeguards Rule
• Experience supporting phishing investigations, vulnerability remediation, access reviews, endpoint security, cloud security, or physical access administration
• Security+, CySA+, SC-200, AZ-900, MS-900, or a comparable certification is preferred but not required

Benefits:

• Medical, dental, and vision Insurance
• 401(k) plan with company match
• Company-paid life insurance, short-term and long-term disability coverage
• Generous PTO and paid holidays
• Professional development opportunities
• Employee recognition programs
• Wellness resources and employee assistance program (EAP)
• Employee referral program with bonus incentives
• Tampa/Remote work location