IT Security Analyst – Technical

About the role

The IT Security Analyst will support First Watch’s information security program by maintaining compliance documentation, conducting risk assessments, and acting as a bridge between business units and IT. You will help ensure that security controls are effective across both cloud and on‑premises environments.

Key responsibilities

• Gather and present data for internal audits, focusing on user access rights and system permissions.
• Support the annual PCI audit, preparing required documentation and evidence.
• Coordinate quarterly penetration tests and weekly vulnerability scans with external partners.
• Perform monthly application security scans of external websites.
• Review and update security policies, procedures, and runbooks to meet audit requirements.
• Assist auditors during walkthroughs and provide evidence of compliance.
• Collaborate with IT leadership to develop and deliver security awareness training.
• Evaluate the effectiveness of existing security policies, incident response, and disaster recovery plans.

Required profile

• Bachelor’s degree or equivalent experience.
• Minimum two years of IT or cyber‑security experience.
• Strong understanding of Microsoft Active Directory, Intune, and Azure AD.
• Experience with security monitoring, endpoint detection, and vulnerability management tools.

Required skills

• MS AD, Intune Azure AD
• SIEM platforms
• EDR/XDR/MDR solutions
• Vulnerability and penetration testing systems
• Halo (preferred)
• N‑Able RMM tool (helpful)
• SaaS, EASM, FIM, CSPM, CSAM
• Phishing and email filtering tools
• Qualys (helpful)
• CrowdStrike (helpful)