Security Analyst

Parker Poe is seeking a Security Analyst to help safeguard the firm’s technology, data, and users through proactive cybersecurity operations. Reporting to the Director of Infrastructure and Security, the Analyst will monitor security events, investigate threats, support incident response and vulnerability management efforts, and collaborate across technology teams to strengthen security controls and reduce risk. This role is a great fit for a curious, detail-oriented professional who enjoys solving complex challenges and making a meaningful impact on organizational security.

This full-time position is preferably based in Parker Poe's Charlotte, NC office, though candidates may also be based in the firm's Raleigh, NC, or Columbia, SC offices. This position may require occasional on-call coverage and work outside regular business hours, including evenings and overnight to support security incidents, maintenance activities, and other business needs.

• Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
• Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and assess cybersecurity risk.
• Support incident response efforts, including containment, remediation, recovery, and post-incident reviews that strengthen the firm’s defenses.
• Document investigations, response activities, and key findings to support effective incident management and continuous improvement.
• Assess and escalate significant security events, providing technology leaders with timely, actionable information.
• Stay current on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends to help strengthen the firm’s defenses.

• Support vulnerability management activities by identifying, assessing, prioritizing, and tracking remediation efforts across the firm’s technology environment.
• Collaborate with Infrastructure, Applications, and other technology teams to coordinate remediation efforts and reduce cybersecurity risk.
• Support the implementation, maintenance, and ongoing evaluation of cybersecurity controls that help protect the firm’s systems, data, and users.
• Contribute to identity and access management efforts, including privileged access controls, account governance, and periodic access reviews.
• Assist in maintaining and enhancing the security technologies across endpoint, identity, network, cloud, monitoring, and detection environments.
• Identify opportunities to strengthen security processes, controls, and operational effectiveness through continuous improvement and proactive risk reduction.

• Maintain accurate security procedures, investigation records, and operational documentation to support day-to-day security operations.
• Contribute to internal and external audits, assessments, and compliance efforts that support the firm’s security and risk management objectives.
• Gather and organize evidence demonstrating the effectiveness of security controls and compliance practices.
• Support the execution of standardized, policy-driven security processes and operational procedures.

• Build strong working relationships with cross-functional technology teams to help identify risks, strengthen controls, and support a secure technology environment.
• Communicate security findings, risks, and remediation recommendations clearly to both technical and non-technical audiences.
• Champion cybersecurity awareness initiatives that encourage best practices and strengthen the firm’s security culture.
• Perform other…