Security Analyst - Tier I

Headquartered in Alpharetta, Georgia, National Christian Foundation (NCF) is a 501(c)(3) charitable grantmaking ministry that provides creative giving solutions and inspires biblical generosity among Christian families, advisors, and charities. NCF has received more than $33 billion in contributions and made more than $25 billion in giver-recommended grants to 90,000 charities. NCF is an industry leader in accepting gifts of appreciated assets such as stocks, real estate, and business interests, which enable givers to save taxes and maximize charitable gifts.

We combine a faith-based approach and like-minded local presence with the support and expertise of a trusted national organization. Learn more at  .

The purpose of this position is to support NCF's information security strategy by performing Tier 1 security operations duties under the direction of the VP, Information Security and the Senior Security Engineer. The Security Analyst monitors information systems for security events, triages alerts and detections escalated by managed detection services, handles security tickets, and escalates confirmed or ambiguous events to senior engineering.

This position also supports the vulnerability management, governance, and third-party risk programs. This position is hybrid; must be willing to be in the office as needed.

This position is hybrid based out of the office in Alpharetta, GA.

Reports to: Manager, Due Diligence Team

Management/Supervision: None

• Monitors information systems for security incidents and vulnerabilities across the endpoint, identity, cloud, and email security tools
• Reviews security detections escalated by the managed detection and response (MDR) provider
• Utilizes SIEM and security tooling to support continuous monitoring and improvement

• Performs first-level triage of security events, distinguishing routine activity from events that warrant escalation, and documents findings clearly and accurately
• Escalates confirmed or ambiguous security events to senior engineering in accordance with defined escalation thresholds and runbooks
• Assists in responding to information system security incidents, including containment support, evidence gathering, and after-action documentation, under senior direction
• Handles and tracks security tickets through resolution, maintaining accurate records to support reporting and metrics

• Supports the vulnerability management program by ticketing findings, tracking remediation against defined service levels, and following up with system owners

• Supports the third-party risk management program by distributing and reviewing vendor security questionnaires, recording results, and maintaining vendor records in the governance, risk, and compliance (GRC) platform

• Supports governance and compliance operations, including policy review cadence, evidence collection, control status tracking, and access review coordination
• Supports security awareness operations, including phishing simulation and training campaign administration

• Assists in collecting and preparing metrics for the quarterly executive dashboard and monthly management reporting

• Assist fellow employees with cybersecurity needs
• Assist with projects as assigned

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily and have reliable attendance. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This position is hybrid; must be willing to be in the office as needed.

• Profession that Jesus Christ is Lord and Savior and a growing, committed relationship with Jesus Christ
• Dedication to biblical Christianity and a lifestyle that is consistent with the teachings of Jesus and the Bible
• Agreement in, support of, and alignment with NCF’s Statement of Faith, mission, vision, and values
• Demonstrates the values of faithfulness, love, and service

• An Associate's or Bachelor's degree in Cybersecurity, Information Technology, or a related field is preferred
• Relevant experience may be considered in lieu of a degree

• A minimum of two years' experience in…