Information Security Analyst (Contract)

About the role

We are seeking an Information Security Analyst to join our team on a contract basis. The analyst will support incident response, threat monitoring, and security awareness initiatives to protect the organization’s assets.

Key responsibilities

• Support Incident Response procedures, including containment, investigation, and recovery from security incidents.
• Triage and respond to security alerts from Managed Detection & Response (MDR) services and user‑reported suspicious activity.
• Assist in developing and enforcing endpoint security policies, device hardening, removable media controls, and encryption standards.
• Document incident reports with root‑cause analysis and improvement recommendations.
• Develop and deliver security awareness training and conduct internal phishing simulations.
• Maintain standard operating procedures for security policies based on industry regulations.
• Assess new software and technology requests for security risks and provide mitigation recommendations.
• Support vulnerability remediation programs and coordinate with system owners.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
• 2‑3 years of experience in an Information Security role, preferably within a regulated environment.
• Hands‑on experience in a SOC or Security Incident Response team.
• Relevant certifications such as CompTIA Security+, CompTIA CySA+, (ISC)² SSCP, or GSEC.
• Strong verbal and written communication skills to translate technical risks to non‑technical staff.
• Ability to work independently or collaboratively in a fast‑paced environment.

Required skills

• Incident Response
• Managed Detection & Response (MDR)
• Endpoint security and device hardening
• Security awareness training and phishing simulations
• Security policy and SOP development
• Vulnerability remediation
• Identity and Access Management (IAM) concepts
• PowerShell scripting
• Python scripting
• Hybrid cloud (cloud & on‑premises) security
• Operating system hardening and encryption standards