Security Analyst II

Amerisure creates exceptional value for its partners, policyholders, and employees. As a property and casualty insurance company, Amerisure’s promise to our partner agencies and policyholders begins with a comprehensive line of insurance products designed to protect businesses, as well as the health and safety of every employee. With an A.M. Best “A” (Excellent) rating, Amerisure serves mid-sized commercial enterprises focused in construction, manufacturing and healthcare.

Ranked as one of the top 100 Property & Casualty companies in the United States, we proudly manage nearly $1 Billion of Direct Written Premium and maintain $1.21 billion in surplus.

Amerisure is currently recruiting for a Security Analyst II that can do a 3-day hybrid approach to support our IT team in our Farmington Hills Headquarters. The ideal candidate will also possess the following skill set.

Summary Statement The Security Analyst II is responsible for monitoring, analyzing, and responding to security incidents and threats to safeguard Amerisure's digital information. This role focuses on threat detection, vulnerability assessments, and implementing security protocols to protect the network, files, user accounts, and sensitive information. The Security Analyst provides knowledge in cyber security governance and cyberthreat management, staying informed on the evolving threat landscape and collaborating with business units and IT to identify, prioritize, and mitigate risks effectively.

Essential Tasks/Major Duties Monitor SIEM (Security Information and Event Management) tools for alerts and incidents.

Perform risk assessments of third-party vendors.

Perform incident response and assist in the remediation process.

Generate security reports for management and compliance purposes.

Support compliance efforts, such as audits and regulatory requirements.

Support cybersecurity awareness program.

Provide level 2 on-call security support.

Knowledge, Skills & Abilities Bachelor’s degree or equivalent combination of education and experience.
2 years security experience.

Working knowledge of firewalls, VPNs, IDS/IPS, network monitoring, and traffic analysis.

Knowledge of frameworks such as NIST, ISO 27001, and COBITUnderstanding cryptographic techniques and protocols (SSL/TLS, SSH, PKI).Experienced in cybersecurity incident response, breach containment and recovery processes.

Staying current with evolving threats, technologies, and security protocols.

Understanding types of malware, detection techniques, and analysis tools.

Experience with Security Information and Event Management (SIEM) systems (e.g., FortiSIEM).Knowledge of Windows, Linux, and macOS, including their security configurations.

Implement detailed instructions for securing cloud environments like AWS and Azure Experienced in conducting third-party cyber risk assessments.

Can follow Dev Sec Ops  practices and make improvements to existing process.

Knowledge of authentication, authorization, SSO, MFA (Okta) and IAM (SailPoint)
Managing endpoint detection and response (EDR) tools.

Apply project management, Agile practices and principles and lead stand-ups.

Clear articulation of security policies, risks, and recommendations to non-technical stakeholders.

Working closely with IT teams, developers, and management.

Provide on-going, effective cybersecurity awareness program for the entire organization.

Professional Certification (CISSP; CEH; CISM; CRISC; CompTIA Security+)Just as we are committed to creating exceptional value for our Partners For Success agencies and policyholders, Amerisure also remains committed to being an employer of choice. We reinforce this commitment by adhering to an Employee Value Proposition that, in part, is provided through a competitive total rewards package.…