IT Security Analyst

Job Title

IT Security Analyst

Baltimore, MD

Exempt

Information Technology (IT)

Director, Information Technology Operations

$90,000 – $100,000 + bonus

The Baltimore Orioles organization is a storied Major League Baseball franchise with a proud tradition, passionate fans, and a deep connection to Baltimore. Under new leadership, the team is entering an exciting chapter focused on building a winning tradition, delivering a world‑class fan experience, fostering innovation, and making a meaningful impact in our community.

We are seeking an IT Security Analyst responsible for protecting and strengthening the organization’s IT infrastructure while serving as a key liaison between IT Security and the business. This role focuses on risk identification and mitigation through business impact assessments, security awareness initiatives, and the implementation of technical and procedural controls, with an emphasis on business continuity and disaster recovery. Responsibilities include monitoring, investigating, and responding to security threats across the organization.

The ideal candidate has hands‑on experience with a variety of industry‑standard tools, a strong understanding of IT infrastructure, excellent analytical and communication skills, and a service‑oriented mindset. The candidate will also assist with escalated issue resolution by providing in‑person hands‑on support to end users as needed.

Primary duties and responsibilities include the following (other duties may be assigned):

• Support the development and testing of business continuity and disaster recovery plans, including coordinating and documenting tabletop exercises and assisting with staff training to ensure readiness during disruptive events.
• Conduct risk assessments and business impact analyses for assigned business areas to identify potential threats and operational impacts.
• Monitor security alerts and events using SIEM platforms and endpoint detection tools, escalating incidents as appropriate.
• Investigate and respond to security incidents such as phishing attempts, malware infections, and unauthorized access, following established incident response procedures.
• Analyze logs from network, endpoint, and identity systems to identify indicators of suspicious or malicious activity.
• Participate in threat hunting activities and proactive vulnerability assessments and work with IT to remediate identified risks.
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks.
• Generate routine reports on security events, trends, and operational metrics for internal stakeholders.
• Support collaboration between technical teams and business stakeholders by helping translate security requirements into practical, business‑friendly guidance.
• Research emerging cybersecurity technologies and assist in evaluating third‑party security tools and vendors to support business needs.
• Work with third‑party vendors under guidance to support integrations, issue resolution, and service delivery.
• Provide helpdesk coverage and respond to escalated user issues as required, including participation in scheduled after‑hours on‑call support.
• Stay current on emerging threats, vulnerabilities, and security best practices to continuously develop skills and improve the organization’s security posture.
• Provide IT Manager on Duty coverage, both on site and remote on call, on a rotating shared basis to cover defined hours of operation which will include events and games.

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or information security roles.
• Strong analytical thinking, and the ability to spot patterns and trends.
• Ability to work independently and as part of a team.
• Familiarity with business continuity, risk assessment, and disaster recovery frameworks such as NIST, ISO
  27001, SOC
  2.
• Proficiency in documentation and process development.
• Understanding of how IT and security can enable business operations.
• Technical skillset to configure security…