Infrastructure Security Analyst

Role Summary

Monitors and improves ARS infrastructure security posture—network, servers, endpoints, and mobile devices. Assesses baseline/patch compliance, validates controls, and coordinates remediation with infrastructure teams to support segmentation and Azure modernization goals.

Primary Responsibilities

• Monitor secure baselines (CIS) and configuration compliance for servers/endpoints/mobile; identify drift and open remediation actions.
• Partner with Network/Infrastructure teams to plan and track segmentation and Azure security improvements; validate implementation and evidence.
• Validate endpoint protection/EDR coverage and logging quality into SIEM/XDR; troubleshoot telemetry gaps with platform owners.
• Maintain standards, procedures, and audit evidence; support control testing and incident investigations.
• Analyze and recommend network security controls including firewall rule sets, Zscaler policies, and segmentation implementation across branch and datacenter environments.
• Support Azure cloud security posture management (CSPM); validate CIS benchmarks for Azure resources and monitor cloud workload protection controls.
• This position will participate in an on-call rotation.

Key Outcomes & KPIs

• Baseline compliance ≥95% across managed assets; critical patch SLAs tracked and met.
• Segmentation and branch refresh milestones tracked/validated per roadmap.
• Improved detection fidelity and actionable reporting from endpoint/network logs.

Required Qualifications

• 3+ years in infrastructure/security operations (Windows/Linux), endpoint management, and network fundamentals; experience assessing hardening and patch posture.
• Familiarity with Azure IaaS/PaaS, CIS benchmarks, and configuration/vulnerability tooling; strong documentation and cross‑team coordination skills.
• AI Fluency: Demonstrated ability to leverage Claude or ChatGPT to continuously improve baseline analysis, configuration validation, and infrastructure remediation.

Tools & Technologies

• EDR/AV, configuration management, vulnerability scanners, network security tools (FW/IDS/IPS)
• Zscaler (ZIA/ZPA), Azure Security Center/Defender for Cloud, CSPM tooling

Collaboration & Decision Rights

• Coordinates remediation with Infra/Network teams; partners with Identity Security Engineer and Threat & Vulnerability Management Analyst to align priorities.
• Supports Ops Manager on incidents, investigations, and control verification.

ARS-Rescue Rooter is an Equal Opportunity Employer AA/EOE/M/F/V/D. In compliance with the Americans with Disabilities Act, ARS-Rescue Rooter may provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.