{"id":3758395,"url":"https://alion.io/job/fortegra-it-security-analyst","title":"IT Security Analyst","company":{"id":2776907,"name":"Fortegra","domain":"fortegra.com","url":"https://alion.io/company/fortegra","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jacksonville, United States","Richardson, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":75000,"max":85000,"currency":"USD","period":"year","gross":null,"usd_annual":85000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"SLSA","optional":false},{"name":"Telegram","optional":false},{"name":"WhatsApp","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-16T12:57:35Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-08T04:12:32Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Responsible for safeguarding confidentiality, integrity, and availability of data, applications, infrastructure, and AI systems across the organization. The Security Analyst leads day-to-day operations of the company’s security tooling across on-premises, cloud, and SaaS environments, drives the identification, investigation, and resolution of security events, and partners with engineering and operations teams to embed security throughout the software development and deployment lifecycle. The role also helps the organization securely adopt, deploy, and govern AI technologies\nPrimary Job Functions:\nSecurity Operations & Incident Response\nMonitor and tune in-place security solutions (SIEM, EDR/XDR, SOAR, email security, DLP, CSPM) for efficient and appropriate operation.\nLead investigations into security incidents escalated beyond Tier 1, including triage, forensic analysis, containment, eradication, and recovery.\nDevelop, maintain, and tune detections (e.g., SIEM rules, EDR custom detections) aligned to MITRE ATT&CK and the organization’s threat models\nConduct and participate in tabletop exercises, purple-team engagements, and incident management drills at least annually.\nMaintain runbooks and playbooks for common incident types, including cloud, identity, ransomware, and AI/LLM-related incidents.\nVulnerability & Threat Management\nLead vulnerability remediation across endpoints, servers, cloud workloads, containers, and SaaS applications, working with infrastructure and engineering teams to drive risk down.\nDesign and execute vulnerability assessments, penetration tests, red-team exercises, and security audits; manage findings through to closure.\nMaintain hardened, up-to-date baselines (CIS Benchmarks or equivalent) for workstations, servers, cloud resources, containers, and network devices.\nConsume and operationalize threat intelligence to anticipate and defend against new attacks and threat vectors.\nCloud & Infrastructure Security\nDesign, implement, and review security controls across cloud environments including IAM, network segmentation, encryption, logging, and posture management (CSPM/CNAPP).\nAdvance the organization’s Zero Trust strategy across identity, device, network, application, and data layers.\nReview Infrastructure-as-Code manifests for security misconfigurations; help maintain policy-as-code guardrails.\nPartner with IT and identity teams on IAM, SSO, MFA, privileged access management, and conditional access policies.\nApplication & Software Supply Chain Security\nPartner with the CISO and engineering leadership to enforce secure coding practices; deliver annual secure-development training, including OWASP Top 10 and OWASP LLM Top 10 content.\nIntegrate and tune security testing in CI/CD pipelines: SAST, DAST, SCA, secret scanning, container image scanning, and IaC scanning.\nEstablish and maintain software supply chain controls, including SBOM generation, dependency review, and alignment with frameworks such as SLSA.\nLead threat-modeling sessions for new products, services, and AI-enabled features.\nAI Security & Governance\nHelp define and enforce policies for the safe adoption and use of AI tools within the organization, including LLM-based assistants, agentic systems, and Model Context Protocol (MCP) or similar tool integrations.\nAssess and mitigate risks specific to AI/ML systems the organization builds or consumes, including prompt injection, jailbreaks, insecure output handling, training-data and model integrity, sensitive-data leakage, and model/identity supply-chain risks.\nApply AI security frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI Risk Management Framework, ISO/IEC 42001 concepts) when evaluating AI vendors, internal AI products, and AI-generated code.\nReview AI-generated code for security vulnerabilities and licensing issues before it reaches production.\nPartner with Legal, Privacy, and Engineering on AI data handling, retention, and disclosure practices.\nAI-Augmented Security Operations & Tooling\nEvaluate and deploy AI-assisted security tooling (e.g., LLM-powered alert triage, log summarization, threat-intel enrichment, phishing analysis, AI-assisted code review) to improve analyst productivity and reduce mean time to detect/respond.\nBuild lightweight automations and scripts (Python, PowerShell, or similar), leveraging AI coding assistants where appropriate, to streamline detection, response, and reporting workflows.\nCompliance, Risk & Audit\nPrepare for and respond to internal and external IT audits and risk assessments (GDPR, DORA, PCI DSS, HIPAA, GDPR/CCPA, as applicable).\nMaintain awareness of applicable laws and regulations related to security, data privacy, and AI (including emerging AI regulation).\nRecommend new or enhanced security solutions and assist with their deployment, integration, and configuration in line with the organization’s security standards.\nMaintain up-to-date knowledge of the security industry, including new attack techniques, defensive tooling, and AI-related threats and defenses.\nThe duties and responsibilities above describe the general nature and level of work performed. They are not intended to be an exhaustive list of all duties and responsibilities that the incumbent may be expected or asked to perform.\nMinimum Qualifications:\nBachelor’s degree in Computer Science, Information Security, or a related technical field, OR equivalent professional experience\n 2+ years of experience in Information Security, Security Analyst, or closely related role\nWorking knowledge of common cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001, CIS Controls, MITRE ATT&CK)\nHands-on experience securing at least one major cloud provider (AWS, Azure, or GCP), including identity, network, and workload controls.\nExperience with vulnerability management, patching, and remediation across servers, endpoints, containers, and cloud workloads\nExperience integrating security into CI/CD pipelines (SAST, DAST, SCA, secret scanning, IaC scanning)\nIncident response experience, including triage, containment, eradication, recovery, and post-incident review\nLicensure, Certification, and/or Registration:\nOne or more of the following preferred: Security+, CySA+, GIAC (e.g., GSEC, GCIH, GCFA, GCSA), OSCP, SC-900\nAI/ML security credentials (e.g., AI Security/Governance certifications) a plus\nSalary Range\n$75,000 - $85,000 base salary, commensurate with experience.\nApplicants must be authorized to work for any employer in the United States. We are unable to sponsor or assume sponsorship of employment visas at this time. We welcome applicants of all backgrounds and national origins\nRecruitment Updates:\nFortegra has recently been made aware of unauthorized communications regarding career opportunities by individuals not associated with Fortegra or our recruitment team. Fortegra will only contact you from the Fortegra domain address (@fortegra.com). If you receive a message from someone posing as a Fortegra recruiter via text message, WhatsApp, Telegram or other messaging platform, please report it as phishing and block the sender.\nFortegra is not accepting unsolicited resumes from search firms for this position.","description_format":"text","description_chars":7163,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-11-04T17:41:44Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.803,"p_room":0.75,"age_days":22,"expected_fill_days":26,"reasons":["conf:1","velocity","win:late","comp:junior"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":85000,"is_top_pay":false},"html_url":"https://alion.io/job/fortegra-it-security-analyst","json_url":"https://alion.io/job/fortegra-it-security-analyst.json","meta":{"generated_at":"2026-11-08T06:03:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13122,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2776907},"rest":"https://alion.io/mcp/rest/get_company?id=2776907"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffortegra-it-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffortegra-it-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffortegra-it-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fortegra-it-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffortegra-it-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3758395}},{"tool":"search_jobs","arguments":{"company":"fortegra.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3758395},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}