IT Security Analyst

United Weld Holdings has an exciting opportunity for an experienced IT Security Analyst to join our Information Technology team.

Location: Fully Onsite, Baton Rouge, LA - not a remote position

Relocation services are not offered

Travel Required

United Weld Holdings is a large-scale, industry-leading pipe fabrication company, headquarted in Baton Rouge, LA specializing in high-complexity piping spools and pipe supports for critical infrastructure projects. With multiple high production fabrication facilities with locations in Livingston, LA;
San Marcos, TX; and Duluth, MN, with advanced welding and testing capabilities, and a reputation for critical path execution. We support major clients in the petrochemical, refining, oil & gas, power generation, and data center sectors across North America as well as internationally. Our continued growth has created an outstanding opportunity for a results-driven Business Development professional to further expand our market share.

The IT Security Analyst is responsible for protecting the organization's information systems, network infrastructure, and digital assets by implementing and maintaining effective cybersecurity practices. Also supports the organization's secure adoption and governance of AI technologies by helping establish security standards, monitoring AI-related risks, and ensuring AI solutions align with organizational security policies and regulatory requirements. This role focuses on developing or enhancing those security policies, monitoring and investigating security threats, coordinating incident response activities, managing vulnerability assessments, and ensuring systems remain secure through proactive maintenance and continuous improvement.

This position will work closely with business stakeholders, and third-party security partners to maintain a strong security posture in support of a growing pipe fabrication and distribution business. This position will report to the IT Network & Security Specialist.

• Develop, implement, maintain, and periodically review information security policies, standards, procedures, and best practices.
• Monitor the organization's security posture and investigate security events, alerts, and suspicious activities to identify potential threats and vulnerabilities.
• Coordinate incident response activities, including investigation, containment, eradication, recovery, documentation, and post-incident reviews.
• Assist in developing, testing, and maintaining incident response and disaster recovery plans.
• Perform vulnerability assessments and penetration testing activities, either directly or in coordination with third-party providers, and oversee remediation efforts.
• Maintain security of Windows workstations and Windows Server environments through regular patching oversight, configuration reviews, and security hardening.
• Administer and monitor security technologies including endpoint protection, firewalls, identity management, email security, and cloud security solutions.
• Review security logs and alerts using SIEM and managed detection and response platforms to identify emerging threats and recommend corrective actions.
• Manage and maintain firewall security policies, VPN connectivity, and network segmentation to support secure business operations.
• Collaborate with IT infrastructure teams to ensure secure system configurations and compliance with organizational security standards.
• Support Microsoft 365 and Microsoft Azure security administration, including identity protection, conditional access, multi-factor authentication, and related security controls.
• Participate in security risk assessments and recommend mitigation strategies for new technologies and business initiatives.
• Assist with security awareness training and promote cybersecurity best practices throughout the organization.
• Maintain documentation related to security configurations, procedures, incident investigations, and compliance activities.
• Develop and maintain security standards, policies, and governance for the secure use of artificial intelligence (AI) technologies across the organization.
• Assess the security and privacy risks associated with AI platforms, applications, and third-party AI services before deployment.
• Monitor emerging AI-related threats, including prompt injection, data leakage, model misuse, and unauthorized use of AI tools, and recommend appropriate safeguards.
• Collaborate with IT and business stakeholders to implement secure AI solutions while protecting confidential, proprietary, and customer information.
• Assist in establishing controls for the use of generative AI technologies, including data classification, acceptable use, access management, and monitoring.
• Evaluate AI vendors and cloud AI services for compliance with organizational security requirements and industry best practices.
• Monitor approved AI platforms for security configuration and compliance…