Information Security Analyst II

Must be located near Atlanta, GA as this will be a hybrid position

As the Information Security Analyst II at PT Solutions, you will be a mid-level cybersecurity professional responsible for supporting the operation and continuous improvement of PT Solutions’ information security program. The role independently manages assigned security responsibilities, supports risk reduction efforts, and collaborates across the organization to help protect PT Solutions’ systems, data, and business operations. Strong ownership, sound judgment, adaptability, and effective communication are essential to success in this role.

You will be responsible for:

Security Operations, Monitoring & Response

• Independently monitor, investigate, and respond to security events across enterprise technologies and security platforms, determining severity, business impact, and appropriate response.
• Perform advanced analysis and correlation of security data to identify malicious activity, policy violations, control gaps, and other potential risks.
• Collaborate with internal teams, managed security providers, and vendors to improve detection, escalation, response, automation, and overall security operations.
• Identify opportunities to improve, automate, orchestrate, and scale security processes and controls as PT Solutions' technology environment, business operations, and threat landscape evolve.

Incident Response & Investigations

• Lead or materially support response to moderate-to-complex security incidents and investigations, including coordination of containment, remediation, recovery, and evidence-preservation activities.
• Document investigation timelines, evidence, findings, impact, actions taken, root cause, and lessons learned in a manner appropriate for leadership, Legal, HR, Compliance, or audit review.
• Immediately evolve high-severity, business-critical, or time-sensitive incidents and maintain clear communications through closure.

Vulnerability, Exposure & Control Validation

• Support vulnerability and exposure management activities by validating risk, prioritizing remediation, coordinating with system owners, and verifying closure of high-risk vulnerabilities and control gaps.
• Support security assessments, remediation workflows, penetration testing, control validation, and related evidence collection.
• Evaluate the effectiveness of security controls across enterprise technologies and drive documented exceptions or deficiencies toward resolution.

Identity, Data & Cloud Security

• Investigate identity, access, data, SaaS, and cloud security anomalies across enterprise platforms and security technologies.
• Support identity governance, privileged access, access reviews, authentication controls, and account lifecycle-management activities.
• Apply identity-centric, least-privilege, and Zero Trust principles when supporting security controls and technology decisions.
• Monitor and respond to security events involving confidential, sensitive, or regulated information, including PHI, PII, and PCI data.

Security Assurance, Risk & Compliance

• Collect, validate, organize, and retain security evidence supporting regulatory, contractual, audit, customer, and internal assurance activities.
• Support security risk assessments, third-party and vendor security reviews, remediation tracking, and communication of findings in clear business-risk terms.
• Maintain repeatable procedures, playbooks, investigation records, evidence packages, and control documentation that support consistent and auditable security operations.

Security Awareness & Human Risk

• Support the investigation and response to user-reported security concerns, phishing, impersonation, and other human-targeted threats.
• Support security awareness activities, simulations,…