{"id":3982469,"url":"https://alion.io/job/einstein-bros-bagels-security-analyst","title":"Security Analyst","company":{"id":1941333,"name":"Einstein Bros. Bagels","domain":"einsteinbros.com","url":"https://alion.io/company/einsteinbros","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":24,"ghost_share":0,"stale_share":0.958,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-09T20:11:30Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T23:41:40Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Brand:\nBagel BrandsBagel Brands is the parent company for your favorite breakfast brands, Einstein Bros. Bagels, Bruegger's Bagels, Noah's NY Bagels, and Manhattan Bagel. We believe in the bagel and how it has the unique ability to bring people together. Our team has a standard set of values and behaviors that allow us to spread a little more joy and happiness in the world. They let us laugh, smile, and enjoy each other’s company a little more. These are the behaviors that guide how we work, how we treat each other, and how we treat our guests. We believe that there is no better way to make someone’s day than with a warm, fresh-baked bagel and a heart-felt good morning.\nPOSITION MISSION\nThe Security Analyst helps protect Bagel Brands' information, systems, and technology infrastructure by proactively identifying security risks, monitoring for threats, and responding to cybersecurity incidents. This role supports the confidentiality, integrity, and availability of critical business systems and data across the organization.\nThrough security assessments, threat monitoring, access management, incident response, and continuous improvement of security controls, the Security Analyst works to reduce vulnerabilities and strengthen the organization's overall security posture. The role partners with IT teams and business stakeholders to implement effective security practices, promote awareness, and support compliance with applicable security standards.\nIn alignment with Bagel Brands' Mission, Vision, and Values, this role demonstrates accountability, curiosity, and collaboration to help protect the technology and information our teams rely on to Help Others Own the Morning.\nDepartment: IT\nSalary Range: $93,000 to $100,000\nAnnual Bonus: 10%\nThis position will report to the Denver Support Center HQ.\nRESPONSIBILITIES INCLUDE, BUT ARE NOT LIMITED TO:\nSecurity Monitoring & Incident Response\nMonitor security systems, alerts, and activities to identify suspicious behavior, potential threats, and vulnerabilities. \nInvestigate, assess, and respond to cybersecurity incidents, including reported phishing emails, suspected breaches, and other security events. \nEvaluate security threats and vulnerabilities, prioritizing response activities based on potential risk and business impact. \nDocument security incidents, investigations, response actions, and findings, including the assessment of potential business impact. \nCollaborate with IT team members and other stakeholders to investigate and resolve security incidents and strengthen preventive measures. \nStay informed of emerging cybersecurity threats, attack methodologies, and technologies to support proactive risk mitigation. \nSecurity Assessments, Controls & Compliance\nConduct and support security audits, vulnerability assessments, and reviews to identify potential risks and control gaps. \nImplement, maintain, and evaluate security protocols and technical controls designed to protect company systems and information. \nSupport compliance with applicable cybersecurity frameworks, regulatory requirements, and industry standards, including PCI DSS and NIST. \nPartner with IT leadership and other stakeholders to develop, maintain, and reinforce cybersecurity policies, procedures, and best practices. \nRecommend and support implementation of security tools, technologies, and countermeasures to reduce cybersecurity risks. \nIdentify opportunities to strengthen security processes and controls based on assessment findings, emerging threats, and organizational needs. \nIdentity & Access Management\nOwn the user onboarding and offboarding access lifecycle, ensuring system and application access is appropriately provisioned, modified, and revoked in accordance with established security and regulatory requirements. \nReview and audit user permissions across applications and systems to ensure alignment with least-privilege access principles. \nIdentify and address inappropriate, outdated, or excessive access permissions. \nCollaborate with IT and business stakeholders to ensure timely and accurate access changes throughout the team member lifecycle. \nMaintain accurate documentation of access reviews, changes, and related security activities. \nSecurity Systems & Technology\nSupport the administration, monitoring, and improvement of security technologies and tools used to protect the organization's systems and data. \nDevelop, maintain, and refine security monitoring rules and alerts within Security Information and Event Management (SIEM) platforms to improve threat detection and response. \nApply knowledge of network security, including firewalls, VPNs, intrusion detection and prevention systems, and network protocols, to identify and address potential vulnerabilities. \nSupport security practices and controls within cloud environments, including Microsoft Azure. \nCollaborate with IT teams to integrate security best practices into infrastructure, applications, and operational processes. \nEvaluate security tools and technologies and recommend improvements that strengthen protection, visibility, and operational effectiveness. \nSecurity Awareness & Cross-Functional Collaboration\nDevelop and deliver cybersecurity awareness and training initiatives to educate team members on security risks and best practices. \nProvide guidance to team members regarding phishing, suspicious activity, data protection, and other information security concerns. \nPartner with IT teams, business leaders, and cross-functional stakeholders to reinforce security standards and practices across the organization. \nCommunicate security risks, findings, and recommendations clearly to technical and nontechnical audiences. \nSupport ongoing security initiatives and process improvements that strengthen organizational readiness and reduce cybersecurity exposure. \nLEADERSHIP COMPETENCIES (INDIVIDUAL CONTRIBUTOR)\nEffective Communication: Communicates cybersecurity risks, technical findings, and security requirements clearly and effectively to both technical and nontechnical audiences. Provides timely updates, maintains accurate documentation, and helps team members understand their role in protecting company information and systems.\nAccountability & Ownership: Takes ownership of assigned security activities, investigations, access management processes, and incident response responsibilities. Demonstrates accuracy, sound judgment, and follow-through while maintaining high standards of confidentiality and security compliance.\nAdaptability & Perseverance: Responds effectively to evolving cybersecurity threats, unexpected incidents, and changing business priorities. Remains focused and solutions-oriented when investigating complex security challenges and works persistently to identify and implement effective resolutions.\nEmpowerment: Supports team members and cross-functional partners by sharing security knowledge, providing practical guidance, and helping others adopt effective cybersecurity practices. Collaborates with IT colleagues to strengthen organizational security capabilities and shared accountability.\nCuriosity: Continuously expands technical knowledge of cybersecurity threats, emerging technologies, and industry best practices. Investigates vulnerabilities, asks thoughtful questions, and identifies opportunities to improve security controls, monitoring, and processes.\nSelf-Awareness: Demonstrates professionalism, discretion, and sound judgment when handling sensitive information and security incidents. Recognizes when additional expertise or escalation is needed, seeks feedback, and continuously develops technical capabilities and effectiveness.\nREQUIRED KNOWLEDGE, SKILLS, & EXPERIENCE\nRequired\n2-5 years of experience in Information Technology, cybersecurity, information security, or a related technical discipline. \n1-2 years of experience working within public cloud environments. \n1-2 years of experience supporting enterprise IT solutions. \nStrong understanding of network security concepts, including firewalls, VPNs, intrusion detection and prevention systems (IDS/IPS), network protocols, and network segmentation. \nDemonstrated ability to identify, assess, prioritize, and respond to cybersecurity threats, incidents, and vulnerabilities. \nKnowledge of cybersecurity threats, adversary tactics, techniques, and procedures (TTPs), and common malware threats. \nFamiliarity with cybersecurity frameworks and compliance standards, including PCI DSS, NIST, and MITRE ATT&CK. \nExperience working with Microsoft Azure or similar cloud environments. \nExperience developing or maintaining custom SIEM rules and alerts to support security monitoring and threat detection. \nStrong analytical, critical-thinking, and problem-solving skills with the ability to investigate complex security issues. \nExcellent attention to detail and documentation skills, including maintaining accurate security incident records and technical findings. \nStrong written and verbal communication skills with the ability to collaborate effectively across technical teams and business functions. \nAbility to manage multiple priorities, respond to changing security needs, and work effectively in a fast-paced environment. \nPreferred\nBachelor's degree in Cybersecurity, Information Security, Information Technology, or a related field. \nCompTIA Security+ certification. \nCertified Ethical Hacker (CEH) certification. \nExperience administering or managing endpoint security solutions. \nWorking knowledge of additional cybersecurity frameworks and standards, including CIS Controls. \nFamiliarity with scripting and automation tools such as PowerShell, Python, or Bash. \nExperience with Microsoft Sentinel SIEM. \nPHYSICAL DEMANDS\nThis position primarily operates in an office environment and requires the ability to sit, stand, walk, bend, and use a computer for extended periods of time. The role may involve occasional lifting or moving of standard office or technology equipment and frequent communication with internal team members and external partners. These requirements may be met with or without reasonable accommodation.\nThe duties of this position may change from time to time. The Company reserves the right to add or delete duties and responsibilities at the discretion of the Company or its managers. This job description is intended to describe the general level of work being performed and is not intended to be all-inclusive.\nBagel Brands is committed to providing equal employment opportunity and fair treatment in employment for all individuals. We do not discriminate on the basis of any characteristic protected by applicable federal, state, or local law. Employment decisions are based solely on qualifications, merit, and business needs.\n**Ranges reflect what employer reasonably and in good faith expects to pay for such position.\nAddress: | 1720 S Bellaire St. Skybox , Denver, Colorado 80222 |The physical demands for this position are sits, stands, bends, lifts, and moves intermittently during working hours. These physical requirements may be accomplished with or without reasonable accommodations.\nThe duties of this position may change from time to time. Bagel Brands reserves the right to add or delete duties and responsibilities at the discretion of the company or its managers. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.\nBagel Brands is committed to providing equal employment opportunity, and fair treatment in employment without regard to race, ethnicity, color, religion, gender/gender identity or expression, sexual orientation, age, national origin or ancestry, physical or mental disability, military status or any other basis in protected by applicable federal, state and local law. Bagel Brands makes employment decisions based solely on qualifications for the position.","description_format":"text","description_chars":11879,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Bakery & Pastry","Catering & Food Services","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-09T20:11:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":24,"reasons":["conf:0","win:early","comp:junior,brand"],"computed_at":"2026-11-09T23:53:24Z"},"pay":null,"html_url":"https://alion.io/job/einstein-bros-bagels-security-analyst","json_url":"https://alion.io/job/einstein-bros-bagels-security-analyst.json","meta":{"generated_at":"2026-11-09T23:53:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14062,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1941333},"rest":"https://alion.io/mcp/rest/get_company?id=1941333"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feinstein-bros-bagels-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feinstein-bros-bagels-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feinstein-bros-bagels-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/einstein-bros-bagels-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feinstein-bros-bagels-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3982469}},{"tool":"search_jobs","arguments":{"company":"einsteinbros.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3982469},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}