IT Security Analyst

Apptium Technologies is hiring an IT Security Analyst to help maintain the organization’s security posture and support compliance initiatives. The role contributes to secure IT operations through security monitoring, vulnerability management, audit support, endpoint and identity security, and collaboration across teams.

What you'll do:

• Security Monitoring & Incident Response: Monitor security alerts, investigate suspicious activity, support incident response efforts, and document findings. Escalate security incidents and coordinate remediation activities as needed
• Vulnerability Management: Coordinate vulnerability scanning activities, review findings, prioritize remediation efforts based on risk, and work with infrastructure and development teams to track vulnerabilities through resolution. Validate remediation efforts and support ongoing vulnerability discovery initiatives
• Security Awareness & Organizational Readiness: Plan, execute, and track security awareness initiatives, including phishing simulations, mandatory security training, and awareness campaigns. Monitor participation and help improve the organization's overall security posture and readiness
• Compliance & Audit Support: Support internal and external audits and help maintain compliance with applicable security frameworks and standards, including SOC 2, ISO 27001, customer security requirements, and internal policies. Assist with evidence collection, remediation tracking, and control validation
• Endpoint Security: Deploy, administer, and maintain endpoint security solutions, including antivirus, endpoint detection and response (EDR), encryption, device management, and firewall technologies
• Identity & Access Management: Manage user access controls, including account provisioning and deprovisioning, access reviews, privileged access management activities, and monitoring for unauthorized access attempts or anomalous activity
• Software, Patch & Security Configuration Management: Ensure operating systems, applications, and security tools are appropriately configured, updated, and patched in accordance with organizational security standards and industry best practices
• Security Tooling & Automation: Design, develop, implement, and maintain security tools, automations, and integrations that improve visibility, monitoring, compliance, vulnerability management, and operational efficiency across the organization
• Asset & Inventory Tracking: Maintain accurate inventories of IT assets, software, and security technologies. Ensure assets comply with organizational security requirements and lifecycle management processes
• Documentation & Reporting: Maintain security policies, procedures, standards, system documentation, compliance records, vulnerability reports, and security metrics. Provide regular reporting on security posture, remediation progress, and operational activities
• Collaboration & Consultation: Partner with IT, Infra, Engineering, HR, Compliance, and business stakeholders to support secure and compliant operations. Provide guidance on security best practices and participate in security reviews for new technologies and business initiatives

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience
• 1+ years of experience in IT, cybersecurity, or compliance-related roles
• Basic understanding of security principles, including endpoint protection, access control, and data privacy
• Familiarity with operating systems (Windows, macOS, Linux) and basic networking concepts
• Strong organizational and documentation skills
• Excellent problem-solving and communication abilities
• Eagerness to learn and grow in the cybersecurity and compliance field

Benefits:

• Elective benefits: programs tailored to your country to best accommodate your lifestyle.
• Formal programs on leadership and professional development, and on-demand courses.
• Seminars and events supporting financial, physical, and mental well-being, plus the global Life Empowerment Assistance Program.
• Inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.
• Onboarding program to network with other new co-workers within your first 30 days.
• Internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and environmental and social initiatives.