INFRASTRUCTURE SECURITY ANALYST

Company Name ARS-Rescue Rooter Overview Role Summary Monitors and improves ARS infrastructure security posture—network, servers, endpoints, and mobile devices. Assesses baseline/patch compliance, validates controls, and coordinates remediation with infrastructure teams to support segmentation and Azure modernization goals. Responsibilities Primary Responsibilities • Monitor secure baselines (CIS) and configuration compliance for servers/endpoints/mobile; identify drift and open remediation actions. • Partner with Network/Infrastructure teams to plan and track segmentation and Azure security improvements; validate implementation and evidence. • Validate endpoint protection/EDR coverage and logging quality into SIEM/XDR; troubleshoot telemetry gaps with platform owners. • Maintain standards, procedures, and audit evidence; support control testing and incident investigations. • Analyze and recommend network security controls including firewall rule sets, Zscaler policies, and segmentation implementation across branch and datacenter environments. • Support Azure cloud security posture management (CSPM); validate CIS benchmarks for Azure resources and monitor cloud workload protection controls. • This position will participate in an on-call rotation. Key Outcomes & KPIs • Baseline compliance ≥95% across managed assets; critical patch SLAs tracked and met. • Segmentation and branch refresh milestones tracked/validated per roadmap. • Improved detection fidelity and actionable reporting from endpoint/network logs. Qualifications Required Qualifications • 3+ years in infrastructure/security operations (Windows/Linux), endpoint management, and network fundamentals; experience assessing hardening and patch posture. • Familiarity with Azure IaaS/PaaS, CIS benchmarks, and configuration/vulnerability tooling; strong documentation and cross‑team coordination skills. • AI Fluency: Demonstrated ability to leverage Claude or ChatGPT to continuously improve baseline analysis, configuration validation, and infrastructure remediation. Tools & Technologies • EDR/AV, configuration management, vulnerability scanners, network security tools (FW/IDS/IPS) • Zscaler (ZIA/ZPA), Azure Security Center/Defender for Cloud, CSPM tooling Collaboration & Decision Rights • Coordinates remediation with Infra/Network teams; partners with Identity Security Engineer and Threat & Vulnerability Management Analyst to align priorities. • Supports Ops Manager on incidents, investigations, and control verification. ARS-Rescue Rooter is an Equal Opportunity Employer AA/EOE/M/F/V/D. In compliance with the Americans with Disabilities Act, ARS-Rescue Rooter may provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.