***At this time, Ingenium Talent is unable to parter with third-party partners for this role. All qualified candidates must be eligible to work in the US without sponsorship.***
Please note that this role is hybrid but all qualified candidates must be local to the Louisville, KY area. Out of state candidates are not being considered at this time.
Ingenium Talent is working with a Louisville-area non-profit organization assisting in their search for a full-time Security Analyst. The Security Analyst is responsible for helping protect the organization’s information systems, digital resources, and technology infrastructure. Working in partnership with internal IT leadership and external security service providers, this role focuses on monitoring security events, assessing risks, and strengthening the overall cybersecurity posture of the organization. This position combines hands-on security operations with cross-functional collaboration, thorough documentation, and ongoing process improvement. The Security Analyst plays a critical role in identifying, communicating, and mitigating security risks while supporting compliance requirements and ensuring the organization remains secure, resilient, and prepared for evolving threats.
Responsibilities, include, but not limited to:
- Collaborate with external security operations partners to oversee and analyze security events, alerts, and potential threats across enterprise networks, systems, endpoints, and cloud-based platforms.
- Assess, investigate, and coordinate the response to security incidents, ensuring timely escalation and remediation while working closely with internal and external stakeholders.
- Evaluate security monitoring reports, metrics, and dashboards, converting technical findings into clear, actionable recommendations for IT leadership and key decision-makers.
- Support the identification, evaluation, and documentation of cybersecurity risks, threats, and vulnerabilities across the organization.
- Contribute to the development, implementation, and ongoing maintenance of information security policies, standards, and operational procedures.
- Participate in risk assessments, internal and external audits, incident response exercises, and regulatory compliance initiatives, ensuring alignment with applicable industry standards and requirements.
- Partner with IT and business teams to implement security controls, best practices, and corrective actions that reduce risk and improve resilience.
- Assist with vulnerability management activities, including scanning, remediation tracking, patch coordination, and security configuration reviews.
- Identify opportunities for process improvements, technology enhancements, and security solutions that strengthen the organization's overall cybersecurity program.
Requirements, include, but not limited to:
- Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field preferred (or equivalent experience).
- 2–5 years of experience in cybersecurity, security operations, or IT with a strong security focus.
- Familiarity with working alongside a Managed Security Service Provider (MSSP) or third-party security vendors.
- Understanding of common security tools and concepts (SIEM, EDR, firewalls, vulnerability management).
- Security certifications such as Security+, CISSP, CEH, or similar.
- Experience in nonprofit, healthcare, retail, or multi-site environments.
- Knowledge of compliance frameworks and regulations relevant to nonprofits or regulated data.
- Experience translating technical security issues into business-level risk discussions.
- Endpoint and network security (EDR, firewalls, VPNs)
- Vulnerability scanning and remediation
- Identity and access management (MFA, least privilege)
- Microsoft 365 / cloud security fundamentals, Microsoft Purview, Microsoft Defender
All qualified candidates are encouraged to apply today.