The Information Security Analyst II is a mid-level security professional responsible for monitoring, investigating, and responding to routine and moderately complex cybersecurity events across DBM Global. The role protects company systems and data by operating security technologies, coordinating incident containment and remediation, assessing security risk, and supporting compliance activities, including IT general controls for Sarbanes-Oxley (SOX).

This position works independently within established procedures, exercises sound judgment when evidence is incomplete, escalates high-impact or complex matters promptly, and helps improve detection, response, and preventive controls. The analyst also provides practical guidance to Level I analysts and partners with Infrastructure, Applications, and business teams to reduce risk.

• Monitor security alerts across networks, endpoints, identities, email, cloud services, and applications; distinguish actionable threats from benign activity.
• Independently investigate routine and moderately complex incidents; determine scope, business impact, likely cause, and required response actions.
• Coordinate containment, recovery, and remediation with technical teams and service providers; escalate significant incidents in accordance with the incident response plan.
• Maintain incident records documenting evidence, findings, decisions, response actions, and remediation recommendations.
• Operate security technologies, including SIEM, EDR, email security, identity security, network security, and vulnerability management tools.
• Identify recurring alerts, false positives, and detection gaps; improve security controls, automation, procedures, and playbooks.
• Perform vulnerability reviews and security assessments; track findings and coordinate remediation to closure.
• Support security audits and SOX IT general control testing, including evidence collection, privileged-activity reviews, and corrective actions.
• Help maintain security policies, metrics, and management reporting; stay current on relevant threats and vulnerabilities.
• Provide technical guidance and case support to Level I Security Analysts.

Measures of Success

• Security alerts and incidents are triaged, investigated, documented, and escalated within established service levels.
• Incident records and audit evidence are accurate, complete, and usable by technical, compliance, and management stakeholders.
• Assigned vulnerabilities, audit findings, and third-party risks are tracked transparently and remediated within agreed timelines.
• Detection quality and response efficiency improve through measurable reductions in avoidable noise, repeat issues, and process gaps.
• Cross-functional partners receive clear, actionable guidance and Level I analysts demonstrate improved consistency and capability.

Experience & Education

• Three to five years of progressively responsible experience in information security, cybersecurity, security operations, infrastructure security, or a related technical field.
• Bachelor’s degree in computer science, cybersecurity, information systems, or a related field, or an equivalent combination of education, training, and relevant experience.
• Demonstrated experience investigating security alerts and incidents and coordinating response with technical teams.

Technical Knowledge

• Working knowledge of SIEM, endpoint security/EDR, email security, identity and access management, network security, vulnerability management, and incident response.
• Ability to interpret security logs, correlate evidence across multiple sources, assess impact, and form defensible conclusions with incomplete information.
• Understanding of common attack techniques, security control concepts, investigation methods, and remediation practices.
• Familiarity with security and control frameworks such as NIST Cybersecurity Framework, NIST 800-53, CIS Controls, or equivalent, and with audit/compliance evidence practices.
• Proficiency with Microsoft Windows 11 and Microsoft 365 applications, including Word, Excel, PowerPoint, Teams, and Outlook.

Certification

• Current ISC2 Certified in Cybersecurity (CC) certification, or ability to obtain it within six months of hire or promotion into the role.
• An intermediate certification such as CompTIA Security+, CySA+, ISC2 SSCP, a Microsoft security certification, or an equivalent credential is preferred.

Core Capabilities

• Integrity and discretion — handles sensitive information responsibly, communicates candidly, and earns trust.
• Analytical problem-solving — applies disciplined reasoning, tests assumptions, and looks beyond the first explanation.
• Judgment and prioritization — makes timely, risk-based decisions and recognizes when escalation is required.
• Communication and collaboration — translates technical findings into clear business impact and works effectively across teams.
• Process discipline — follows established controls, maintains high-quality records, and improves repeatable workflows.
• Learning agility and resilience — stays current, adapts to changing threats and technologies, and persists through complex investigations.

Equal Employment Opportunity

DBM Global is an Equal Opportunity Employer and maintains an Affirmative Action Program where required by applicable law. Employment decisions are made without unlawful discrimination.