Job Description
Department: Information Security
Functional Team: Security Posture & Reporting
Reports To: Head of Information Security
Position: Associate Information Security Analyst
Location: Tampa (Preferred)
Classification: Exempt
Job Type: Full Time
Pay Band/Grade: $50,000 to $54,000
Position Summary
This is an internal, hands-on information security role focused on protecting COEO Solutions' own environment. The Associate Information Security Analyst monitors and strengthens the security posture of company endpoints, identities, cloud services, internal applications, and network infrastructure across the combined company, and turns security data into clear metrics, findings, and action.
The analyst operates the company's security platforms, including endpoint protection (EDR/XDR), Nessus/Tenable vulnerability management, SIEM, KnowBe4, and Black Kite, and monitors the security configuration of Microsoft Entra ID, Active Directory, Microsoft 365, and Microsoft Intune. Core work includes endpoint protection coverage and policy health, patch and configuration compliance against approved baselines, identity and access governance, vulnerability tracking through remediation, security alert triage, and security awareness campaigns.
A core responsibility of the position is defining and maintaining consistent identity and access standards across Microsoft 365, Active Directory, cloud services, internal business applications, security platforms, remote access systems, and infrastructure management tools. This includes setting requirements for joiner, mover, and leaver processes and validating that they are followed; designing role based access control; enforcing least privilege; overseeing privileged access; identifying stale, orphaned, shared, and service accounts for remediation; and running recurring access reviews with system owners.
The position works closely with Corporate IT, Production Engineering, Human Resources, application and system owners, and Compliance and Assurance. Information Security owns security controls and posture, and Compliance and Assurance owns audit and framework programs. The analyst may support SOC 2, PCI DSS, and other audit activity as needed, including providing technical evidence, validating controls, and tracking remediation, without owning those programs.
While the focus of this role is internal security posture, identity and access governance, analytics, and reporting, priorities in a managed services environment can shift quickly. The analyst may occasionally be called on to support security validation, investigation, or testing work as business needs arise.
Keys to Success:
Collaborative: Works effectively with Corporate IT, Human Resources, engineering, application and system owners, and compliance teams to maintain appropriate access, close security gaps, and gather data for internal reporting; Data Driven: Turns security platform data into accurate metrics, trends, and prioritized actions that leadership can understand; Detail-Oriented: Maintains accurate identity, access, endpoint, evidence, documentation, and remediation records; Ownership: Follows access issues, findings, and remediation items through closure; Promotes Continual Improvement: Identifies ways to automate access reviews, compliance monitoring, and security reporting, standardize security controls, and reduce manual effort; Adaptable: Shifts priorities quickly when incidents or business changes require it; Security Mindset: Protects confidentiality, follows change control, and applies least privilege to avoid unintended exposure or disruption.
Growth Path:
Associate Information Security Analyst → Information Security Analyst → Sr. Information Security Analyst → Lead Information Security Analyst
Requirements:
-
Foundational knowledge of networking, including TCP/IP, routing, switching, firewalls, and common network protocols.
-
Working familiarity with Windows, macOS, and Linux endpoints and how they are managed and secured.
-
Working knowledge of identity and access management concepts, including authentication, authorization, least privilege, role-based access control (RBAC), separation of duties, privileged access, and identity lifecycle management.
-
Familiarity with Microsoft Entra ID, Active Directory, Microsoft 365, security groups, administrative roles, MFA, Conditional Access, and hybrid identity environments.
-
Basic familiarity with SSO and automated provisioning concepts, including SAML, OpenID Connect, OAuth, and SCIM.
-
Basic understanding of cybersecurity concepts, including vulnerabilities, common attack techniques, least privilege, and defense in depth.
-
Exposure to endpoint protection, vulnerability scanning, or security monitoring tools.
-
Comfort working with data in Excel or similar tools to build metrics, trends, and reports.
-
Strong analytical, troubleshooting, and technical problem-solving skills.
-
Ability to document findings clearly and communicate effectively with technical and nontechnical audiences.
-
Self-motivated, detail-oriented, and willing to learn new technologies.
Preferred Qualifications
Experience with any of the following is beneficial:
-
Endpoint & Identity: Microsoft Defender, SentinelOne, CrowdStrike, or similar EDR/XDR; Microsoft Intune; Microsoft Entra ID; Active Directory; Microsoft 365 security tools.
-
Identity Governance: Access reviews, entitlement management, Privileged Identity Management, role-assignable groups, lifecycle workflows, privileged groups, service accounts, and emergency-access accounts.
-
Application Identity: Experience integrating applications with Microsoft Entra ID using SAML, OpenID Connect, OAuth, or SCIM.
-
Vulnerability & Patch Management: Nessus/Tenable, Qualys, or OpenVAS; patch management; CIS Benchmarks or other configuration baselines.
-
Security Operations: SIEM, SOAR, or XDR alert triage and incident investigation.
-
Awareness & Third Party Risk: KnowBe4 or Black Kite.
-
Reporting & Analytics: Power BI, Excel, or similar reporting tools.
-
Infrastructure: Fortinet, Palo Alto, Cisco, Meraki, or enterprise network environments.
-
Frameworks: Familiarity with SOC 2, PCI DSS, NIST CSF, or CIS Controls.
-
Automation: PowerShell, Python, Microsoft Graph, or Bash scripting.
-
Security Testing: Nmap, Wireshark, Kali Linux, or similar tools for vulnerability validation and investigation.
An associate or bachelor's degree in Cybersecurity, Information Technology, Networking, or a related field is preferred but not required.
Certifications such as CompTIA Security+, Network+, CySA+, Microsoft SC-200, or Microsoft SC-900 are beneficial.
Candidates with help desk, systems administration, network operations, or security operations center backgrounds are encouraged to apply.
Responsibilities:
-
Administer and monitor endpoint protection (EDR/XDR) across all company devices, ensuring full agent coverage, current policies, and timely response to detections.
-
Administer and monitor endpoint protection (EDR/XDR) across all company devices, ensuring full agent coverage, current policies, and timely response to detections.
-
Define and monitor Microsoft Intune compliance policies, endpoint security policies, encryption controls, and update baselines, and validate that device enrollment and configuration meet security standards.
-
Track patch and configuration compliance against approved baselines, including the standard endpoint build, and drive remediation with Corporate IT and system owners.
-
Monitor identity and access controls across Microsoft Entra ID, Active Directory, Microsoft 365, internal applications, SaaS platforms, security tools, remote access systems, and infrastructure management platforms, and validate that provisioning and deprovisioning follow approved standards and are completed on time.
-
Design and maintain the RBAC model by mapping job responsibilities to approved groups, application roles, and privilege levels while minimizing direct user assignments and unnecessary standing access.
-
Apply least-privilege principles by identifying excessive, obsolete, conflicting, or unapproved permissions and coordinating remediation with application and system owners.
-
Oversee privileged access, including administrative roles, service accounts, and emergency access accounts, through recurring reviews and Privileged Identity Management where available.
-
Run recurring access reviews with system owners and track access removals through completion.
-
Define security requirements for central authentication and automated provisioning using Microsoft Entra ID, SAML, OpenID Connect, OAuth, and SCIM, and review integrations against those requirements.
-
Investigate identity-related risks and alerts, including suspicious sign-ins, MFA registration changes, legacy authentication, inactive accounts, unexpected privilege elevation, and anomalous administrative activity.
-
Run scheduled internal vulnerability scans with Nessus/Tenable, prioritize findings by risk, and track remediation to closure.
-
Triage and investigate security alerts from SIEM, endpoint, firewall, and cloud sources, escalating confirmed incidents through the incident response process.
-
Maintain accurate inventories of company assets, identities, applications, and systems in scope for security monitoring and identify unmanaged or unprotected assets and accounts.
-
Build and maintain internal security posture metrics and dashboards for leadership, including protection coverage, remediation timelines, open findings by severity, and trends.
-
Manage KnowBe4 security awareness training and phishing simulations, including user provisioning and completion reporting.
-
Monitor external attack surface and third party security posture using Black Kite and related tools.
-
Support Compliance and Assurance with SOC 2, PCI DSS, and other audit activity as needed, including technical evidence, control validation, and remediation tracking; audit ownership remains with Compliance and Assurance.
-
Support consolidation of security tools and controls across the combined company into common standards.
-
Automate data collection, reporting, and routine security tasks using PowerShell, Python, or Bash.
-
Perform additional duties as required, which may occasionally include security validation, investigation, or testing work.
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
