Overview

Description: Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk.The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment. Security Operations & Incident Response Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity.Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up.Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives.Maintain incident response plans, investigation procedures, escalation paths and case documentation. Cloud, Identity & Secure Access Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity.Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes.Support Zero Trust and secure access services for private applications.Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services. Data Protection, Human Risk & Insider Risk Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing.Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories.Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information.Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting. Endpoint, Network & Application Security Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines.Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching.Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements.Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner.Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions. Resilience, Governance & Continuous Improvement Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements.Maintain policies, standards, procedures, diagrams, and inventories.Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations.Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents.Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services.Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring act