What You'll Do

• Partner with Information Security, Infrastructure, and Application Development teams to strengthen enterprise security controls and capabilities.
• Participate in security operations activities, including monitoring, investigation, and response to potential security incidents.
• Conduct vulnerability assessments, analyze findings, and support remediation efforts across technology environments.
• Assist in the development, implementation, and maintenance of security policies, standards, procedures, and response plans.
• Perform information security risk assessments and provide recommendations to reduce organizational risk.
• Support identity and access management processes, access reviews, and privilege management initiatives.
• Validate application security testing results and collaborate with development teams to promote secure coding practices.
• Evaluate emerging cybersecurity threats, vulnerabilities, and industry trends to recommend appropriate safeguards and mitigation strategies.
• Provide security consultation and guidance to systems administrators, technology teams, and business stakeholders.
• Develop meaningful security metrics, dashboards, and reports to communicate risk and program effectiveness to leadership.
• Participate in enterprise security projects, audits, compliance initiatives, and continuous improvement efforts.
• Help educate and train employees on cybersecurity awareness and security best practices.

Why This Role is Unique

• Work across nearly every area of Information Security, gaining exposure to multiple cybersecurity disciplines.
• Collaborate with infrastructure, cloud, networking, identity, and application development teams.
• Contribute to enterprise-wide security initiatives that directly impact organizational risk and resilience.
• Gain hands-on experience with security technologies, investigations, risk management, and governance activities.
• Join a team that values continuous learning, innovation, and professional development.

Essential Job Functions

• Monitor, analyze, and investigate security events, alerts, and suspicious activity across enterprise systems and networks.
• Support incident response activities, including triage, investigation, containment, documentation, and post-incident analysis.
• Assist in developing, maintaining, and improving enterprise information security policies, standards, procedures, and response plans.
• Perform security risk assessments and provide actionable recommendations to mitigate identified risks.
• Conduct vulnerability management activities, including scanning, validation, reporting, prioritization, and remediation tracking.
• Review security logs, alerts, and intelligence sources to identify threats, vulnerabilities, and potential indicators of compromise.
• Collaborate with security team members, system administrators, and application developers to address security concerns and implement controls.
• Assist with implementing, validating, and documenting security-related changes across enterprise technology environments.
• Support application security initiatives through testing validation, secure coding reviews, and collaboration with development teams.
• Develop and deliver security metrics, status reports, and presentations for management and stakeholders.
• Research emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices to improve organizational defenses.
• Provide consultation and security guidance to technology teams regarding infrastructure, cloud, applications, and data protection.
• Maintain confidentiality, integrity, and professionalism while handling security-sensitive information and investigations.
• Support cybersecurity awareness, education, and training initiatives across the organization.
• Participate in audits, compliance assessments, and enterprise security improvement initiatives as assigned.

Minimum Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Business, or a related field.
• Five (5) years of progressive experience in information security, cybersecurity, systems administration, infrastructure security, or related technology disciplines.
• Demonstrated knowledge of cybersecurity principles, technologies, controls, and best practices.
• Strong analytical, problem-solving, and investigative skills.
• Excellent written and verbal communication skills, including the ability to communicate technical concepts to both technical and non-technical audiences.
• Ability to prioritize and manage multiple projects and initiatives in a dynamic environment.
• Valid driver's license required.

Preferred Qualifications

• Security+, GSEC, GCIH, CySA+, CISSP, CASP+, or comparable cybersecurity certifications preferred.
• Experience working with:
  • Vulnerability management platforms
  • Security Information and Event Management (SIEM) tools
  • Endpoint Detection and Response (EDR) solutions
  • Identity and Access Management (IAM) technologies
  • Cloud security platforms and controls
  • Application security testing tools
• Familiarity with security frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, or similar.
• Knowledge of incident response methodologies, threat hunting, and security operations practices.

This position is based at ALSAC’s National Executive Office in Memphis, TN and is eligible for a hybrid work schedule.