Security Operations Analyst

$80,000 - $115,000/Yr

Hub International - Chicago, IL

Full-time - Mid Level

Chicago, IL

10,001+ employees

Insurance Carriers and Related Activities

About the position

The Information Security Analyst at HUB International plays a crucial role in the Security Operations and Engineering team, focusing on protecting the integrity and confidentiality of data and infrastructure while enabling business functionality. This position requires strong teamwork, leadership skills, and effective communication to foster relationships with both technical and business units. The analyst will lead incident response activities, support security solutions, and contribute to continuous improvement efforts in information security.

Responsibilities

• Protect the integrity and confidentiality of HUB data and infrastructure while enabling business functionality.
• Lead incident response activities and provide timely response to security incidents and alerts.
• Assist in improving processes, identify efficiencies, and recommend solution enhancements.
• Contribute to Continuous Improvement and Posture Management efforts regarding HUB's information security tooling and systems.
• Support the HUB Information Security Governance & Compliance team during risk assessments and audits.
• Champion vulnerability remediation efforts and liaise with IT and application owners for patch management.
• Gather and report on key organizational information security metrics.
• Provide Level II Support for incident and request tickets escalated from other technical teams.
• Communicate with stakeholders to assist remediation efforts.
• Lead or assist in root-cause analysis for security incidents.
• Contribute to weekly and monthly posture and response operations reporting.
• Analyze and recommend upgrades and changes specific to HUB's security operations.

Requirements

• Bachelor's degree in a relevant discipline or equivalent experience.
• At least 2 years' experience in an Information Security role or 3 years in an IT engineering capacity.
• 2+ years of experience with cloud infrastructure and O365 services.
• Experience with Active Directory / MS Entra ID management.
• Experience with SOAR (Security Orchestration, Automation, and Response).
• Experience with vulnerability assessment and patch management practices.
• Knowledge of industry security standards such as ISO 27001, NIST 800-53, SOC2, PCI, SOX.
• Knowledge of Windows Event and network device logging.
• Understanding of networking protocols including TCP, DNS, DHCP, Firewalls, VPN, and Web proxies.

Nice-to-haves

• Related certifications (e.g., GSEC, CISSP, AWS) preferred.
• Experience with KQL and SPL or other Query Languages.
• Demonstrated incident response experience with malware and endpoint detection solutions.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• 401(k) accounts
• Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• Paid time off benefits
• Eligible bonuses, equity, and commissions for some positions.