Information Security Analyst II

About the role

Arctiq, a global technology services company, is offering a 6-month contract-to-hire position for an Information Security Analyst II with one of its clients. The role supports the operation and continuous improvement of the client's information security program, independently managing assigned security responsibilities and collaborating across the organization. It is a hybrid position in Atlanta, GA, starting onsite 2-3 days per week and moving to twice a month.

Key responsibilities

• Monitor, investigate and respond to security events, determine severity and business impact, and escalate high-severity incidents
• Analyze and correlate security data to find malicious activity, policy violations and control gaps
• Lead or support response to moderate-to-complex incidents, including containment, remediation, recovery and evidence preservation
• Document investigation timelines, findings, root cause and lessons learned for leadership, Legal, HR, Compliance or audit
• Manage vulnerability and exposure, coordinate remediation with system owners and verify closure
• Support security assessments, penetration testing, control validation and evidence collection
• Investigate identity, access, data, SaaS and cloud security anomalies and support identity governance, privileged access and access reviews
• Respond to security events involving confidential, sensitive or regulated data such as PHI, PII and PCI data
• Collect and retain security evidence for regulatory, audit and assurance activities
• Support security awareness, simulations, metrics and follow-up actions
• Mentor team members, write SOPs and investigation notes, and provide security support for new technologies and acquisitions

Required profile

• Associate degree in Information Technology, Cybersecurity, Computer Science or a related field (equivalent experience may be considered)
• 3-5 years of cybersecurity operations, SOC, incident response or security engineering support experience
• Ability to independently manage moderate-complexity security events
• Clear communication of technical risk to technical teams, leadership and non-technical stakeholders

Required skills

• SIEM/SOC operations, EDR, email security, identity security, cloud security and data-security monitoring
• Advanced log analysis and event correlation across endpoint, identity, email, network, SaaS and cloud telemetry
• Microsoft 365, Entra ID, Windows security, networking concepts, authentication protocols and common attacker techniques
• Vulnerability management, patch workflows, CVE/CVSS, CISA KEV and risk-based prioritization
• Healthcare data-security considerations (PHI/HIPAA, PCI)
• Security automation, orchestration and scripting (PowerShell)
• AI fundamentals, including generative AI concepts, data protection and security risks