{"id":2881087,"url":"https://alion.io/job/avant-security-analyst","title":"Security Analyst","company":{"id":1825563,"name":"AVANT","domain":"goavant.net","url":"https://alion.io/company/goavant","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":84000,"max_usd":160000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SOC 2","optional":false}],"status":"closed","first_seen_at":"2026-10-19T19:51:18Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-24T11:17:13Z","board_verified":false,"closed_at":"2026-10-24T11:17:13Z","days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Description\nPosition Title: Security Analyst\nDepartment: Technology\nReporting To: VP of IT\nLocation: Chicago Hybrid/Remote USA\nAbout the Role:\nWe're looking for a hands-on Security Analyst to own our organization's day-to-day security posture - across our people, endpoints, software, and vendors. This role sits at the intersection of governance, technical security operations, and emerging AI risk. You'll be the person who knows where our exposure is, who's using what, and whether our controls actually hold up under testing.\nWe need someone comfortable both setting standards and getting into the weeds - reviewing a vendor's SOC 2 report one hour, scoping a vulnerability scan the next, and evaluating whether a new AI tool an employee wants to use is safe to approve.\nEmployees located in the Greater Chicagoland Area or Dallas/Frisco area are currently expected to work from the office 1 day per week; however, this is subject to change.\nWhat You’ll Do:\n Employee & Endpoint Security\nMonitor employee security practices, device compliance, and adherence to internal security policies \nMaintain visibility into laptops, mobile devices, and endpoints - encryption status, EDR/antivirus coverage, and configuration drift \nManage identity and access controls (least privilege, MFA, offboarding, privileged access reviews) \nRun security awareness training and phishing simulations \n Software & Shadow IT Oversight\nMaintain an inventory of software and SaaS tools in use across the organization, including unsanctioned (\"shadow IT\") applications \nEvaluate and approve new software and AI tools before adoption, assessing data handling, permissions, and vendor risk \nTrack license and application sprawl as a security (not just cost) issue \n AI Security\nStay current on AI-specific risks: prompt injection, data leakage through AI tools, model/vendor data retention policies, unsanctioned use of generative AI on sensitive data, and supply-chain risk in AI-powered products \nCo-Develop and enforce acceptable-use policies for AI tools and copilots \nAssess AI vendors and features embedded in existing software (e.g., new AI features rolled into SaaS products) for security implications \n Third-Party & Vendor Risk\nConduct vendor security assessments and due diligence before and during engagements \nReview vendor security documentation (SOC 2, ISO 27001 certifications, penetration test summaries, security questionnaires) \nMaintain a third-party risk register and reassess periodically based on criticality and data access \n Technical Security Operations\nCoordinate or perform vulnerability scanning across infrastructure, endpoints, and applications \nManage or oversee penetration testing engagements (internal team or external vendors), track findings through remediation \nPerform cyber risk assessments across systems, business units, and processes \nSupport incident response: detection, triage, containment, and post-incident review \n Governance, Risk & Compliance\nMaintain and mature the security program in alignment with frameworks such as NIST CSF/800-53, ISO 27001, SOC 2 \nEnsure practices support compliance with data privacy regulations including GDPR and CCPA/CPRA \nOwn or contribute to security policies, standards, and audit readiness \nReport on security posture, risk, and metrics to leadership \nRequirements\n 4+ years in information security, GRC, or senior analyst role \nWorking knowledge of NIST, ISO 27001, GDPR, and CCPA/CPRA requirements \nAlthough we outsource these functions, familiarity with vulnerability scanning tools (e.g., Nessus, Qualys, Tenable); with penetration testing methodology (internal team or managing external testers); and with Security Operations functions (SOC) and how to work with our MSSP to mitigate and remediate events \nExperience with endpoint management/MDM tools and understanding of laptop/device security controls \nFamiliarity with SaaS/vendor risk assessment processes \nEmerging understanding of AI security risks and governance - you don't need to be an ML engineer, but you should be able to speak intelligently about the risks generative AI and AI-embedded tools introduce \nStrong communication skills - able to translate technical risk into business terms for non-technical stakeholders \nComfortable balancing policy/governance work with hands-on technical review \n Nice to Have:\nRelevant certifications: CISSP, CISM, Security+, GSEC, CEH, or similar \nExperience building or maturing a security program from an early stage \nAlthough we are not regulated, prior experience in a regulated industry (finance, healthcare, or similar) \nWhy Join Us\nAvant’s culture, the envy of the technology channel, is loaded with A players, self-starters and outgoing rockstars. We focus on empowering our staff to run and make decisions and as a company, we have 300+ people all moving in the same direction.\nOur work-life balance is normal, benefits are competitive, and it is generally exciting to work for Avant.\nBenefits\nMedical Insurance\nDental Insurance\nVision Insurance\nCommuter Benefits\n401K Match\nUnlimited PTO\nGenerous Parental Leave\nThe information contained in this job description is intended to convey information about the essential functions and requirements of the position. It is not an exhaustive list of the skills, efforts, duties, responsibilities or working conditions associated with the opportunity. In addition, the employee should be able to communicate effectively and in a constructive manner with management, peers, and coworkers.","description_format":"text","description_chars":5504,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Dental insurance","Health insurance","Parental leave","Unlimited PTO","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Enterprise Networks","Managed Network Services"],"lifecycle":[{"event":"open","at":"2026-10-19T22:48:37Z"},{"event":"close","at":"2026-10-24T11:17:13Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/avant-security-analyst","json_url":"https://alion.io/job/avant-security-analyst.json","meta":{"generated_at":"2026-10-26T15:29:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20553,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1825563},"rest":"https://alion.io/mcp/rest/get_company?id=1825563"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favant-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favant-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favant-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avant-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favant-security-analyst"}]}