IT Security Analyst

Apptium is seeking an IT Security Analyst to help maintain its security posture, support compliance initiatives, and contribute to secure IT operations. The role includes security monitoring and incident response, vulnerability and endpoint management, access controls, audit support, and security documentation.

What you'll do:

• Security Monitoring & Incident Response: Monitor security alerts, investigate suspicious activity, support incident response efforts, and document findings. Escalate security incidents and coordinate remediation activities as needed
• Vulnerability Management: Coordinate vulnerability scanning activities, review findings, prioritize remediation efforts based on risk, and work with infrastructure and development teams to track vulnerabilities through resolution. Validate remediation efforts and support ongoing vulnerability discovery initiatives
• Security Awareness & Organizational Readiness: Plan, execute, and track security awareness initiatives, including phishing simulations, mandatory security training, and awareness campaigns. Monitor participation and help improve the organization's overall security posture and readiness
• Compliance & Audit Support: Support internal and external audits and help maintain compliance with applicable security frameworks and standards, including SOC 2, ISO 27001, customer security requirements, and internal policies. Assist with evidence collection, remediation tracking, and control validation
• Endpoint Security: Deploy, administer, and maintain endpoint security solutions, including antivirus, endpoint detection and response (EDR), encryption, device management, and firewall technologies
• Identity & Access Management: Manage user access controls, including account provisioning and deprovisioning, access reviews, privileged access management activities, and monitoring for unauthorized access attempts or anomalous activity
• Software, Patch & Security Configuration Management: Ensure operating systems, applications, and security tools are appropriately configured, updated, and patched in accordance with organizational security standards and industry best practices
• Security Tooling & Automation: Design, develop, implement, and maintain security tools, automations, and integrations that improve visibility, monitoring, compliance, vulnerability management, and operational efficiency across the organization
• Asset & Inventory Tracking: Maintain accurate inventories of IT assets, software, and security technologies. Ensure assets comply with organizational security requirements and lifecycle management processes
• Documentation & Reporting: Maintain security policies, procedures, standards, system documentation, compliance records, vulnerability reports, and security metrics. Provide regular reporting on security posture, remediation progress, and operational activities
• Collaboration & Consultation: Partner with IT, Infra, Engineering, HR, Compliance, and business stakeholders to support secure and compliant operations. Provide guidance on security best practices and participate in security reviews for new technologies and business initiatives

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience
• 1+ years of experience in IT, cybersecurity, or compliance-related roles
• Basic understanding of security principles, including endpoint protection, access control, and data privacy
• Familiarity with operating systems (Windows, macOS, Linux) and basic networking concepts
• Strong organizational and documentation skills
• Excellent problem-solving and communication abilities
• Eagerness to learn and grow in the cybersecurity and compliance field

Benefits:

• Elective benefits: programs tailored to your country to best accommodate your lifestyle.
• Formal programs on leadership and professional development, and on-demand courses.
• Seminars, events, and the global Life Empowerment Assistance Program to support financial, physical, and mental well-being.
• Inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.
• Network with other new co-workers within your first 30 days through the onboarding program.
• Internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and environmental and social initiatives.