Technical Security Analyst; onsite

Our Restaurant Client in Bradenton, FL is looking for a 5 day onsite Technical Security Analyst for a Full Time role. Must be local and pay is 105-115K.

The IT Security Analyst will support the company's information security and compliance efforts by maintaining documentation, implementing processes, and assisting with audits. This role performs vulnerability assessments and risk evaluations, serves as a bridge between business units and IT, and partners with IT leadership to ensure appropriate security controls are applied across cloud and on-premises environments.



Key Responsibilities:

• Collect, analyze, and present data for internal audits focused on user access and permissions across critical systems.
• Assist with the annual PCI compliance program, preparing and submitting required documentation.
• Support patch management processes, event/log correlation, and related security reporting.
• Coordinate penetration tests and regular vulnerability scans with third-party vendors.
• Conduct monthly application security scans and external website checks.
• Help review and update security policies, procedures, and control documentation; create runbooks and procedural guides to support audit and compliance activities.
• Participate in audit walkthroughs and remediation efforts as requested by internal or external auditors.
• Interpret technical security requirements and provide practical recommendations to stakeholders.
• Collaborate with IT leadership and training teams to develop and refresh security awareness training for employees.
• Evaluate the effectiveness of existing security policies, incident response plans, and disaster recovery measures and provide improvement suggestions.

• Bachelor's degree or equivalent experience.
• At least 2 years of experience in IT or cybersecurity roles.
• Working knowledge of Microsoft Active Directory, Intune, and Azure AD.
• Experience using and reporting from SIEM, EDR/XDR/MDR solutions, and vulnerability/penetration testing tools.
• Familiarity with application security scanning, external attack surface management (EASM), cloud security posture management (CSPM), SaaS security, and identity/access management concepts.
• Hands-on or exposure to tools such as Qualys, Crowd Strike, Halo, and N-able (beneficial).
• Experience with phishing prevention and email filtering solutions.