Security Analyst

Parker Poe Adams & Bernstein LLP is seeking a Security Analyst to help protect the firm’s technology environment, data, and users through proactive cybersecurity operations. In this Raleigh, NC onsite role, you will monitor and investigate security activity, support incident response and vulnerability management, and partner with multiple technology teams to improve security controls and reduce risk.

• Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
• Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and assess cybersecurity risk.
• Support incident response activities, including containment, remediation, recovery, and post-incident reviews that strengthen defenses.
• Document investigations, response actions, and key findings to support incident management and continuous improvement.
• Assess and escalate significant security events, providing technology leaders with timely, actionable information.
• Stay current on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends.
• Assist vulnerability management by identifying, assessing, prioritizing, and tracking remediation efforts across the firm’s technology environment.
• Collaborate with Infrastructure, Applications, and other technology teams to coordinate remediation and reduce cybersecurity risk.
• Support implementation, maintenance, and ongoing evaluation of cybersecurity controls that protect systems, data, and users.
• Contribute to identity and access management efforts, including privileged access controls, account governance, and periodic access reviews.
• Help maintain and improve security technologies across endpoint, identity, network, cloud, monitoring, and detection environments.
• Identify opportunities to strengthen security processes, controls, and operational effectiveness through continuous improvement and proactive risk reduction.
• Maintain accurate security procedures, investigation records, and operational documentation for day-to-day security operations.
• Contribute to internal and external audits, assessments, and compliance efforts related to security and risk management objectives.
• Gather and organize evidence demonstrating the effectiveness of security controls and compliance practices.
• Support standardized, policy-driven security processes and operational procedures.
• Build strong working relationships with cross-functional technology teams to identify risks and strengthen controls.
• Communicate security findings, risks, and remediation recommendations clearly to technical and non-technical audiences.
• Champion cybersecurity awareness initiatives that reinforce best practices and strengthen the firm’s security culture.
• Perform other duties as assigned by leadership.

• Minimum three years of information technology, cybersecurity, information security, or related experience, plus a bachelor’s degree in information technology, computer science, or related field, or the combined equivalent education and experience.
• Experience supporting cybersecurity operations, including security monitoring, threat detection, incident response, vulnerability management, or related security functions.
• Experience analyzing security alerts, logs, and technical data.
• Familiarity with endpoint, network, identity, email, and cloud security concepts and technologies.
• Ability to communicate security findings and risks to both technical and non-technical audiences.
• Strong written and verbal communication skills, with a sense of urgency and the ability to multi-task in a fast-paced environment.
• Ability to work independently, exercise sound professional judgment, and handle sensitive and confidential…