Security Analyst

Position Summary

Parker Poe is seeking a Security Analyst to help safeguard the firm’s technology, data, and users through proactive cybersecurity operations. Reporting to the Director of Infrastructure and Security, the Analyst will monitor security events, investigate threats, support incident response and vulnerability management efforts, and collaborate across technology teams to strengthen security controls and reduce risk. This role is a great fit for a curious, detail-oriented professional who enjoys solving complex challenges and making a meaningful impact on organizational security.

This full-time position is preferably based in Parker Poe's Charlotte, NC office, though candidates may also be based in the firm's Raleigh, NC, or Columbia, SC offices. This position may require occasional on-call coverage and work outside regular business hours, including evenings and overnight to support security incidents, maintenance activities, and other business needs.

Essential Duties and Responsibilities

Security Monitoring and Incident Response

• Detect and investigate security events, suspicious activity, and potential threats across the firm’s technology environment.
• Analyze endpoint, network, identity, email, cloud, and system data to identify indicators of compromise and assess cybersecurity risk.
• Support incident response efforts, including containment, remediation, recovery, and post-incident reviews that strengthen the firm’s defenses.
• Document investigations, response activities, and key findings to support effective incident management and continuous improvement.
• Assess and escalate significant security events, providing technology leaders with timely, actionable information.
• Stay current on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends to help strengthen the firm’s defenses.

Security Operations and Vulnerability Management

• Support vulnerability management activities by identifying, assessing, prioritizing, and tracking remediation efforts across the firm’s technology environment.
• Collaborate with Infrastructure, Applications, and other technology teams to coordinate remediation efforts and reduce cybersecurity risk.
• Support the implementation, maintenance, and ongoing evaluation of cybersecurity controls that help protect the firm’s systems, data, and users.
• Contribute to identity and access management efforts, including privileged access controls, account governance, and periodic access reviews.
• Assist in maintaining and enhancing the security technologies across endpoint, identity, network, cloud, monitoring, and detection environments.
• Identify opportunities to strengthen security processes, controls, and operational effectiveness through continuous improvement and proactive risk reduction.

Compliance, Governance, and Documentation

• Maintain accurate security procedures, investigation records, and operational documentation to support day-to-day security operations.
• Contribute to internal and external audits, assessments, and compliance efforts that support the firm’s security and risk management objectives.
• Gather and organize evidence demonstrating the effectiveness of security controls and compliance practices.
• Support the execution of standardized, policy-driven security processes and operational procedures.

Collaboration and Security Awareness

• Build strong working relationships with cross-functional technology teams to help identify risks, strengthen controls, and support a secure technology environment.
• Communicate security findings, risks, and remediation recommendations clearly to both technical and non-technical audiences.
• Champion cybersecurity awareness initiatives that encourage best practices and strengthen the firm’s security culture.
• Perform other duties as assigned by leadership.

 Qualifications

• Minimum three years of information technology, cybersecurity, information security, or related experience, and a bachelor’s degree in information technology, computer science, or related field; or the combined equivalent education and experience.
• Experience in a legal, professional services, financial services, or other security-conscious environment preferred.
• Relevant cybersecurity certifications, such as CompTIA Security+, CySA+, Microsoft Security certifications, GIAC, or similar credentials preferred.
• Experience supporting cybersecurity operations, including security monitoring, threat detection, incident response, vulnerability management, or related security functions.
• Experience analyzing security alerts, logs, and technical data.
• Familiarity with endpoint, network, identity, email, and cloud security concepts and technologies.
• Experience with Microsoft security technologies, including Microsoft Entra ID, Intune, Active Directory, Microsoft 365, Microsoft Defender, or similar platforms preferred.
• Familiarity with cybersecurity frameworks, regulatory requirements, compliance activities, audits, or security assessments preferred.
• Experience with CrowdStrike Falcon, SIEM platforms, endpoint detection and response (EDR), or related security technologies preferred.
• Strong written and verbal communication skills, including the ability to explain technical concepts and security risks to both technical and non-technical audiences.
• Strong customer service skills with a sense of urgency and ability to multi-task in a fast-paced environment.
• Ability to work independently, exercise sound professional judgment, and handle sensitive and confidential information with discretion.
• Ability to participate in occasional on-call coverage and work outside regular business hours, including evenings, overnight hours, weekends, and holidays, as needed to support security incidents and operational requirements.

Traits for Success

This role is a strong fit for someone who enjoys protecting systems, solving complex problems, and staying ahead of evolving cybersecurity threats. The most successful candidate will bring curiosity, sound judgment, and a proactive mindset to their work, helping safeguard the firm's technology, data, and users while collaborating across teams to strengthen security practices. We are looking for someone who is:

• A naturally curious investigator who enjoys analyzing security events, identifying patterns, and identifying the root cause of technical issues and potential threats.
• A detail-oriented problem solver who can balance multiple priorities, make sound decisions, and approach security challenges with both analytical thinking and practical judgment.
• A collaborative partner who enjoys working with Infrastructure, Applications, Service Desk, and other technology teams to strengthen security controls and reduce risk.
• A clear and confident communicator who can explain security findings, risks, and recommendations in a way that resonates with both technical and non-technical audiences.
• A continuous learner who stays informed on emerging threats, evolving technologies, and cybersecurity best practices, and is motivated to expand their knowledge and strengthen their skills.