Information Security Analyst

Role Overview & Responsibilities

Position Summary

The Information Security Analyst independently performs established cybersecurity activities to protect MHM systems, data, and users.

This role owns routine security alerts and service requests, administers assigned security tools, investigates common security incidents, and coordinates vulnerability remediation within defined policies and procedures.

Complex, unusual, or higher-risk matters are escalated to the Senior Analyst, Security Engineer, or Information Security leadership.

Salary

The starting salary rate begins at $93,734.

Mid range at $119,511.

Actual starting rate will be commensurate with experience and education.

Scope and Impact

This position contributes to enterprise-wide security by maintaining assigned security controls, resolving routine security issues, and tracking corrective actions through completion.

The role protects the confidentiality, integrity, and availability of organizational information and maintains operational records and compliance evidence.

This position has no budgetary or supervisory responsibilities.

Decision-Making Authority

Operates with general supervision and independently prioritizes and completes routine security activities within established procedures and approved configurations.

Determines the severity of common security events, performs authorized response actions, resolves routine tool and service issues, and verifies corrective actions.

Escalates complex, unusual, unresolved, or higher-risk matters and changes outside established authority to the Senior Analyst, Security Engineer, or Information Security leadership.

Interactions / Working Relationships

Internal



* Collaborates regularly with Information Security leadership, Security Engineers, IT Infrastructure, Service Desk, Systems Administrators, Network Administrators, Application teams, and business stakeholders to support enterprise security operations.

External



* Works periodically with technology vendors, managed service providers, software support representatives, and third-party security partners regarding security tools, incident resolution, and product support.

Essential Duties and Responsibilities



* Administer assigned security technologies, including endpoint protection, email and web security, vulnerability management, logging, and SIEM platforms; perform routine configuration, health checks, troubleshooting, and maintenance within approved procedures.

(20%)


* Monitor, analyze, investigate, and resolve routine security alerts and user-reported concerns; determine severity, document findings, perform authorized response actions, and escalate complex, unusual, or higher-risk matters.

(20%)


* Own routine information security tickets and service requests from receipt through resolution, including investigation, communication with users and IT teams, accurate documentation, and follow-up on escalated items.

(15%)


* Conduct routine vulnerabil...