Security Analyst

Brand:

Bagel Brands is the parent company for your favorite breakfast brands, Einstein Bros. Bagels, Bruegger's Bagels, Noah's NY Bagels, and Manhattan Bagel. We believe in the bagel and how it has the unique ability to bring people together. Our team has a standard set of values and behaviors that allow us to spread a little more joy and happiness in the world. They let us laugh, smile, and enjoy each other’s company a little more. These are the behaviors that guide how we work, how we treat each other, and how we treat our guests. We believe that there is no better way to make someone’s day than with a warm, fresh-baked bagel and a heart-felt good morning.

POSITION MISSION

The Security Analyst helps protect Bagel Brands' information, systems, and technology infrastructure by proactively identifying security risks, monitoring for threats, and responding to cybersecurity incidents. This role supports the confidentiality, integrity, and availability of critical business systems and data across the organization.

Through security assessments, threat monitoring, access management, incident response, and continuous improvement of security controls, the Security Analyst works to reduce vulnerabilities and strengthen the organization's overall security posture. The role partners with IT teams and business stakeholders to implement effective security practices, promote awareness, and support compliance with applicable security standards.

In alignment with Bagel Brands' Mission, Vision, and Values, this role demonstrates accountability, curiosity, and collaboration to help protect the technology and information our teams rely on to Help Others Own the Morning.

Department: IT

Salary Range: $93,000 to $100,000

Annual Bonus: 10%

This position will report to the Denver Support Center HQ.

RESPONSIBILITIES INCLUDE, BUT ARE NOT LIMITED TO:

Security Monitoring & Incident Response

• Monitor security systems, alerts, and activities to identify suspicious behavior, potential threats, and vulnerabilities.

• Investigate, assess, and respond to cybersecurity incidents, including reported phishing emails, suspected breaches, and other security events.

• Evaluate security threats and vulnerabilities, prioritizing response activities based on potential risk and business impact.

• Document security incidents, investigations, response actions, and findings, including the assessment of potential business impact.

• Collaborate with IT team members and other stakeholders to investigate and resolve security incidents and strengthen preventive measures.

• Stay informed of emerging cybersecurity threats, attack methodologies, and technologies to support proactive risk mitigation.

Security Assessments, Controls & Compliance

• Conduct and support security audits, vulnerability assessments, and reviews to identify potential risks and control gaps.

• Implement, maintain, and evaluate security protocols and technical controls designed to protect company systems and information.

• Support compliance with applicable cybersecurity frameworks, regulatory requirements, and industry standards, including PCI DSS and NIST.

• Partner with IT leadership and other stakeholders to develop, maintain, and reinforce cybersecurity policies, procedures, and best practices.

• Recommend and support implementation of security tools, technologies, and countermeasures to reduce cybersecurity risks.

• Identify opportunities to strengthen security processes and controls based on assessment findings, emerging threats, and organizational needs.

Identity & Access Management

• Own the user onboarding and offboarding access lifecycle, ensuring system and application access is appropriately provisioned, modified, and revoked in accordance with established security and regulatory requirements.

• Review and audit user permissions across applications and systems to ensure alignment with least-privilege access principles.

• Identify and address inappropriate, outdated, or excessive access permissions.

• Collaborate with IT and business stakeholders to ensure timely and accurate access changes throughout the team member lifecycle.

• Maintain accurate documentation of access reviews, changes, and related security activities.

Security Systems & Technology

• Support the administration, monitoring, and improvement of security technologies and tools used to protect the organization's systems and data.

• Develop, maintain, and refine security monitoring rules and alerts within Security Information and Event Management (SIEM) platforms to improve threat detection and response.

• Apply knowledge of network security, including firewalls, VPNs, intrusion detection and prevention systems, and network protocols, to identify and address potential vulnerabilities.

• Support security practices and controls within cloud environments, including Microsoft Azure.

• Collaborate with IT teams to integrate security best practices into infrastructure, applications, and operational processes.

• Evaluate security tools and technologies and recommend improvements that strengthen protection, visibility, and operational effectiveness.

Security Awareness & Cross-Functional Collaboration

• Develop and deliver cybersecurity awareness and training initiatives to educate team members on security risks and best practices.

• Provide guidance to team members regarding phishing, suspicious activity, data protection, and other information security concerns.

• Partner with IT teams, business leaders, and cross-functional stakeholders to reinforce security standards and practices across the organization.

• Communicate security risks, findings, and recommendations clearly to technical and nontechnical audiences.

• Support ongoing security initiatives and process improvements that strengthen organizational readiness and reduce cybersecurity exposure.

LEADERSHIP COMPETENCIES (INDIVIDUAL CONTRIBUTOR)

Effective Communication: Communicates cybersecurity risks, technical findings, and security requirements clearly and effectively to both technical and nontechnical audiences. Provides timely updates, maintains accurate documentation, and helps team members understand their role in protecting company information and systems.

Accountability & Ownership: Takes ownership of assigned security activities, investigations, access management processes, and incident response responsibilities. Demonstrates accuracy, sound judgment, and follow-through while maintaining high standards of confidentiality and security compliance.

Adaptability & Perseverance: Responds effectively to evolving cybersecurity threats, unexpected incidents, and changing business priorities. Remains focused and solutions-oriented when investigating complex security challenges and works persistently to identify and implement effective resolutions.

Empowerment: Supports team members and cross-functional partners by sharing security knowledge, providing practical guidance, and helping others adopt effective cybersecurity practices. Collaborates with IT colleagues to strengthen organizational security capabilities and shared accountability.

Curiosity: Continuously expands technical knowledge of cybersecurity threats, emerging technologies, and industry best practices. Investigates vulnerabilities, asks thoughtful questions, and identifies opportunities to improve security controls, monitoring, and processes.

Self-Awareness: Demonstrates professionalism, discretion, and sound judgment when handling sensitive information and security incidents. Recognizes when additional expertise or escalation is needed, seeks feedback, and continuously develops technical capabilities and effectiveness.

REQUIRED KNOWLEDGE, SKILLS, & EXPERIENCE

Required

• 2-5 years of experience in Information Technology, cybersecurity, information security, or a related technical discipline.

• 1-2 years of experience working within public cloud environments.

• 1-2 years of experience supporting enterprise IT solutions.

• Strong understanding of network security concepts, including firewalls, VPNs, intrusion detection and prevention systems (IDS/IPS), network protocols, and network segmentation.

• Demonstrated ability to identify, assess, prioritize, and respond to cybersecurity threats, incidents, and vulnerabilities.

• Knowledge of cybersecurity threats, adversary tactics, techniques, and procedures (TTPs), and common malware threats.

• Familiarity with cybersecurity frameworks and compliance standards, including PCI DSS, NIST, and MITRE ATT&CK.

• Experience working with Microsoft Azure or similar cloud environments.

• Experience developing or maintaining custom SIEM rules and alerts to support security monitoring and threat detection.

• Strong analytical, critical-thinking, and problem-solving skills with the ability to investigate complex security issues.

• Excellent attention to detail and documentation skills, including maintaining accurate security incident records and technical findings.

• Strong written and verbal communication skills with the ability to collaborate effectively across technical teams and business functions.

• Ability to manage multiple priorities, respond to changing security needs, and work effectively in a fast-paced environment.

Preferred

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, or a related field.

• CompTIA Security+ certification.

• Certified Ethical Hacker (CEH) certification.

• Experience administering or managing endpoint security solutions.

• Working knowledge of additional cybersecurity frameworks and standards, including CIS Controls.

• Familiarity with scripting and automation tools such as PowerShell, Python, or Bash.

• Experience with Microsoft Sentinel SIEM.

PHYSICAL DEMANDS

This position primarily operates in an office environment and requires the ability to sit, stand, walk, bend, and use a computer for extended periods of time. The role may involve occasional lifting or moving of standard office or technology equipment and frequent communication with internal team members and external partners. These requirements may be met with or without reasonable accommodation.

The duties of this position may change from time to time. The Company reserves the right to add or delete duties and responsibilities at the discretion of the Company or its managers. This job description is intended to describe the general level of work being performed and is not intended to be all-inclusive.

Bagel Brands is committed to providing equal employment opportunity and fair treatment in employment for all individuals. We do not discriminate on the basis of any characteristic protected by applicable federal, state, or local law. Employment decisions are based solely on qualifications, merit, and business needs.

**Ranges reflect what employer reasonably and in good faith expects to pay for such position.

The physical demands for this position are sits, stands, bends, lifts, and moves intermittently during working hours. These physical requirements may be accomplished with or without reasonable accommodations.

The duties of this position may change from time to time. Bagel Brands reserves the right to add or delete duties and responsibilities at the discretion of the company or its managers. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.

Bagel Brands is committed to providing equal employment opportunity, and fair treatment in employment without regard to race, ethnicity, color, religion, gender/gender identity or expression, sexual orientation, age, national origin or ancestry, physical or mental disability, military status or any other basis in protected by applicable federal, state and local law. Bagel Brands makes employment decisions based solely on qualifications for the position.