Security Analyst I

About the Role

The Security Analyst I helps protect Command Alkon's systems, data, and customers by maintaining daily security operations. This role is part of Security Operations within TechOps and collaborates closely with the Security Manager. The analyst monitors security alerts and event logs across endpoints, networks, and cloud systems, triages and escalates issues, and assists with incident response under senior guidance. This work protects the platform used by heavy building materials suppliers, haulers, and contractors. The analyst also drives outcomes through vulnerability management and access reviews, which involves scanning systems, tracking fixes, and following up with system owners until findings are closed. Compliance support is integrated, with evidence collection, control testing, and audit preparation to ensure the company's security posture is provable. The analyst collaborates across IT, engineering, and system owners to resolve findings and documents policies, procedures, and runbooks. As the role is fully remote, close team coordination through tickets and documentation is essential, building a foundation for a path toward a mid-level analyst role.

Key Responsibilities

• Triage every monitoring alert in the queue, escalating real issues to the Security Manager with clear notes.
• Close assigned vulnerability findings on schedule and follow up with each system owner until the fix is verified.
• Complete access review and deprovisioning audits on time, with every exception documented and assigned to an owner.
• Keep policies, procedures, and runbooks current.
• Collect audit evidence before each request is due.
• Document incidents accurately during response and complete post-incident follow-up tasks on time.
• Track every security ticket from open to resolution, with status updates.
• Learn the company's environment to differentiate routine alerts from those needing escalation.
• Take on additional tasks as skills grow and communicate when a task is beyond current skill.
• Communicate in writing with clear, complete detail.
• Work well in a remote setting by posting status early, responding to team messages promptly, and asking for help before a blocker grows.
• Build toward a mid-level analyst path by picking up new skills, such as scripting, cloud security concepts, or SIEM workflows.

Requirements & Tech Stack

• Foundational networking knowledge: TCP/IP, DNS, and firewalls.
• Working knowledge of Windows and macOS.
• Log and alert triage across endpoint, network, and cloud systems.
• Vulnerability scanning and remediation tracking.
• Access review and provisioning or deprovisioning audit support.
• Basic scripting in Python, PowerShell, or Bash.

Qualifications

• 0-2 years in security, IT, or a related technical field, including internships, help desk, or sysadmin work.
• Evidence collection and control testing support for audits.
• Clear, precise written documentation for policies, procedures, runbooks, and incident records.
• Clear written communication, especially for documentation.
• Clear follow-up with system owners on open findings.
• Coordination with the Security Manager and team in a remote setting.
• Genuine interest in cybersecurity.
• Willingness to learn quickly in a fast-paced environment.
• Ability to work independently while staying in step with the team.
• Attention to detail.

Credentials (Nice to Have)

• A degree in Computer Science, Information Security, or IT, or equivalent hands-on training with applicable certifications.