freehire launches on Product Hunt on 26 August.

Follow →

iT1

Discussion

Security Analyst

iT1, a leading national technology solution provider headquartered in Tempe, AZ, is looking for a skilled and experienced Security Analyst to join our team. iT1 has been ranked as one of Arizona’s Best Places to Work for over a decade, running in the Small Business category. You will be exposed to many of the top technology offerings in the market and can work with some of the most talented people in the country.

As a Cybersecurity Analyst, you are expected to have a strong technical background in security operations, threat detection, and incident response. This role is responsible for protecting both internal and customer environments while serving as a key operational interface with Managed Detection and Response (MDR) partners.

You will contribute to the maturity and scalability of security operations by building processes, developing runbooks, and enabling internal teams to consistently and effectively respond to security events.

Requirements

Key Responsibilities:

Threat Monitoring and Incident Response:

  • ·Monitor security tools and platforms for suspicious activity and potential threats.
  • Investigate and triage alerts, respond to incidents, and document findings, root cause, and remediation actions.

MDR Customer and Partner Interface:

  • Serve as the primary operational interface between customers, MDR providers, and internal teams for security events and escalations.
  • Coordinate incident response activities across MDR partners and internal teams
  • Communicate security incidents, risks, and remediation status to customers
  • Participate in incident reviews, RCA discussions, and customer meetings
  • Ensure MDR services align with customer SLAs and contractual requirements
  • Escalate critical risks and ensure timely resolution across stakeholders

Vulnerability and Risk Management:

  • Perform vulnerability assessments and coordinate remediation activities across environments.
  • Identify and prioritize risks and recommend mitigation strategies to internal leadership and customers.

Security Operations and Tooling:

  • Maintain and tune security tools including SIEM, EDR, firewalls, and intrusion detection/prevention systems.
  • Analyze logs and telemetry to identify threats and improve detection capabilities.

Process Development and Runbooks:

  • Develop and maintain security operations processes, SOPs, and incident response runbooks to support consistent and scalable service delivery.
  • Create repeatable workflows for incident detection, escalation, and remediation
  • Continuously refine playbooks based on lessons learned and threat intelligence
  • Support onboarding of new customers by defining operational procedures

Training and Enablement (Help Desk & Infrastructure):

  • Partner with Help Desk and Infrastructure teams to build security awareness and operational readiness.
  • Deliver training on security tools, processes, and escalation procedures
  • Enable teams to identify, triage, and escalate security events appropriately
  • Provide ongoing guidance to improve cross-team collaboration and response effectiveness

Governance, Compliance, and Documentation:

  • Support development and enforcement of security policies, standards, and procedures.
  • Participate in audits and maintain documentation aligned to frameworks such as ISO 27001, NIST, SOC 2, and CMMC.

Continuous Improvement:

  • Stay current with emerging threats, vulnerabilities, and industry trends.
  • Recommend and implement improvements to strengthen security posture across internal and customer environments.

Technical Requirements:

  • 2+ years of experience in cybersecurity, SOC operations, or managed security services
  • Experience working with MDR providers or managed security environments
  • Strong understanding of incident response processes and threat detection
  • Experience developing documentation, runbooks, or operational processes
  • Ability to communicate technical security issues to both technical and non-technical audiences
  • Experience with Microsoft Security tools, CrowdStrike, Palo Alto, SentinelOne
  • Strong analytical, problem-solving, and organizational skills
  • Ability to manage multiple priorities and respond effectively under pressure

Preferred Certifications:

  • CompTIA Security+
  • CompTIA CySA+
  • Certified Ethical Hacker (CEH)
  • GIAC (GSEC, GCIH)
  • Microsoft Security Certifications (preferred)

Physical Demands

  • Sit at a computer for 8 hours per day
  • Keyboarding for 8 hours per day
  • Near Vision (working with small objects or reading small print)
  • Speaking (communicating information to clients/coworkers)
  • Hearing Requirements (In person speech, telephone, other sounds)

Benefits

  • Medical, dental, and vision benefits with highly subsidized premiums
  • Two weeks paid time off in your first year, with increasing PTO as tenure increases, and most major holidays off
  • 401(k) Plan with employer match
  • Onsite Fitness Center
  • Onsite Monthly Massages
Show

What this application asks

workable

First name, Last name, Email, Headline, Phone, Address, Current/Most Recent Employer - Name of Company, Photo, Please provide your LinkedIn URL, Resume, Summary, Experience, Education, Cover letter, Are you willing to undergo a background check, in accordance with local law/regulations?, Will you now, or in the future, require sponsorship for employment visa status (e.g. H-1B visa status)?, Are you legally authorized to work in the United States?, What is your desired compensation range?, Are you a veteran of the U.S. Armed Forces?, What languages are you fluent in?, Please provide reasons for leaving previous jobs., Do you agree to complete your application without using AI or Chat GPT? Please note that all applications found using AI will be automatically disqualified.

  • Are you located within the continental United States? yes / no
  • How many years of hands-on experience do you have in cybersecurity, SOC operations, or managed security services?
  • Can you describe your experience working with MDR providers or in managed security environments? written answer
  • What state do you live in?
  • Do you have 2 or more years of experience in cybersecurity, SOC operations, or managed security services? yes / no
  • Do you have direct experience working with an MDR provider or within a managed security services environment? yes / no
  • Do you have hands-on experience with at least one of the following: CrowdStrike, SentinelOne, Palo Alto Networks, or Microsoft Security tools? yes / no
  • Do you have experience developing or maintaining incident response runbooks, SOPs, or operational security processes? yes / no
  • Describe your experience with SIEM, EDR, or log/telemetry analysis. What tools have you used and what was your role in tuning or maintaining them? written answer
  • What has your involvement looked like with security compliance frameworks such as ISO 27001, NIST, SOC 2, or CMMC? written answer
  • Walk us through a security incident you investigated from initial alert through resolution. How did you triage the alert, what was your investigation process, and how did you communicate the incident, risk, and remediation status to stakeholders or customers? written answer
  • Were you referred by anyone? If so, please let us know who we can thank!

See also

56,846 jobs
Remote US jobs
65,306 jobs
Security jobs
14,516 jobs
Remote Worldwide jobs
37,331 jobs
JavaScript jobs
54,834 jobs
TypeScript jobs
141,978 jobs
Python jobs
45,878 jobs
React jobs
6,352 jobs
Go jobs
216,809 jobs
Senior-Level jobs
25,197 jobs
Backend jobs

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.

A new version of freehire is available