IT Security Analyst

Wiss, Janney, Elstner Associates Inc. (WJE) is a global firm of engineers, architects, and materials scientists committed to helping solve, repair, and avoid problems in the built world and construction industry. Since 1956, our applied experience from more than 175,000 projects and our state-of-the-art laboratory and testing facilities have made WJE a leader in providing innovative yet practical solutions to the clients we serve. From historic preservation to post-disaster safety assessments, we respond to the most challenging problems in the built world.

Description:

The IT Security Analyst supports the security of the enterprise by performing two primary functions. The first is managing the daily operations of security tools and controls across the organization. The second is identifying, investigating, and helping resolve potential security incidents detected by those systems.

In addition, the analyst assists with implementing new security technologies, maintaining security policies and procedures, and supporting vulnerability assessments and audits. This role is expected to understand the organization's security objectives and actively contribute to maintaining a strong and resilient security posture.

Responsibilities:

Strategy & Planning

• Contribute to the development and maintenance of security policies, standards, and procedures

• Assist in planning enterprise security architecture improvements and evaluating security requirements for new initiatives

• Support updates to business continuity and disaster recovery plans, including documentation and testing activities

Acquisition & Deployment

• Stay informed about emerging threats, industry trends, and evolving security tools

• Recommend enhancements to existing security controls and participate in evaluating new technologies

• Assist in deploying and configuring new security solutions following established standards and best practices

Operation Management

• Monitor security tools and platforms to ensure proper operation and timely detection of threats

• Review and analyze logs, alerts, and system activity to identify anomalies or potential security incidents

• Support investigations into security events and infrastructure-related issues across networks, systems, and end-user environments

• Maintain secure configuration baselines for systems and security tools and help ensure compliance across the enterprise

• Leverage the KnowBe4 platform to strengthen the organization's security culture through targeted training, user engagement insights, and continuous improvement of awareness initiatives

• Troubleshoot and resolve complex end-user issues related to endpoint detection (EDR). Identity and access management (IAM), and email security platforms

• Help maintain documentation for security tools, processes, and workflows

Position Requirements:

Knowledge & Experience

• Hands-on experience administering or supporting Microsoft 365 services including Office 365, Entra ID, and Intune

• Experience with identity and access management including MFA, SSO, conditional access and directory services

• Familiarity with email security platforms such as Mimecast including threat protection and policy management

• Basic experience with endpoint security tools such as CrowdStrike, Zscaler, Netskope or similar cloud security platforms

• Foundational knowledge of Windows Server, Hyper-V virtualization and exposure to Linux administration

• Exposure to Microsoft Purview or other DLP technologies with an understanding of data classification and compliance controls

• Familiarity with Python or other scripting languages for automation and basic security tooling

• Awareness of emerging AI based security solutions with interest in learning how AI and automation enhance detection and response

Personal Attributes

• Strong analytical and problem-solving skills

• Ability to prioritize and execute tasks effectively in fast-paced, high-pressure situations

• Clear and confident written, verbal, and interpersonal communication

• Skilled at researching security issues, technologies, and emerging threats

• Able to translate technical concepts into business-friendly language

• Self-motivated, proactive, and able to work independently

• Detail-oriented with a commitment to accuracy and quality

• Collaborative mindset with the ability to contribute effectively in team settings

Formal Education & Certification

• College diploma or university degree in Computer Science and two years' equivalent work experience

**This position will be on-site 5 days per week**

WJE offers a robust, total compensation structure composed of base salary, incentive pay, and industry-leading benefits:

• Base salary is determined through consideration of a candidate's qualifications, skills, competencies, and proficiency for the role while remaining mindful of our commitment to internal equity.

• Employees receive variable compensation based on personal and company performance, typically resulting in above-market total compensation.

A good faith estimate of the annual starting base salary (gross) is in the following range:

WJE's industry-leading, total rewards package enables our employees to grow and thrive with comprehensive health and financial benefits, including:

• Robust and affordable health plans for employees and their families, including HSA as well as low and high-deductible PPO options

• Generous 401(k) matching of 110% for the first 6% of eligible pay, vesting immediately

• Time off to care for yourself and others

• Investments in employees' educational assistance and professional development

Learn more about WJE's total rewards package here.