[Remote] Junior IT Security Analyst

Note: The job is a remote job and is open to candidates in USA. The client is a Fortune 100 off-price apparel and home fashions retailer. The Junior IT Security Analyst will support the Cyber Engagement team by planning and evaluating social engineering simulations, analyzing user behavior and campaign data, and turning security insights into training, reinforcement, reporting, and measurable behavior-change recommendations.

Responsibilities

• Research and monitor the social engineering threat landscape to inform risk-based simulation priorities, campaign themes, and timely response recommendations
• Plan, coordinate, execute, and evaluate social engineering simulations and testing, including phishing, vishing, and other relevant scenarios where appropriate
• Analyze campaign performance, user trends, reporting behaviors, and root causes to identify patterns and opportunities for focused and role-based training
• Translate simulation results and security signals into practical training recommendations, reinforcement needs, and behavior-focused improvement opportunities
• Support in-the-moment and event-driven reinforcement for unplanned or time-sensitive communications, helping reinforce secure behaviors
• Develop clear metrics, dashboards, and leadership-ready summaries that connect human insights to business outcomes and measurable behavior change
• Identify opportunities to streamline, automate, and improve reporting processes, including centralized metrics and KPIs for Cyber Engagement
• Collaborate with Awareness and Training, Cyber Resiliency, business partners, and other stakeholders to align messaging and learning needs
• Support external vendor relationship management for simulation and response capabilities, including coordination and continuous improvement opportunities
• Moves social engineering work beyond campaign execution by connecting results to root cause, remediation, and measurable behavior change
• Strengthens collaboration across Cyber Engagement by creating a consistent feedback loop between simulations, awareness content, and role-based training
• Improve sustainability through repeatable reporting and metrics that can scale across global users and business functions

Skills

• Applicants must be authorized to work for ANY employer in the U.S
• 2–5 years of experience in cybersecurity awareness, social engineering simulation, or related security discipline
• Experience designing, supporting, or measuring social engineering simulations, user awareness campaigns, behavior change initiatives, and remediation efforts
• Ability to transform security and user behavior data into meaningful metrics, executive-level reporting, and risk-informed recommendations
• Experience developing dashboards and reporting using Power BI or similar analytics tools
• Demonstrated ability to analyze complex data in Excel, identify trends and patterns, develop meaningful insights, and present findings in a clear, actionable manner
• Ability to write and execute SQL queries
• Strong analytical, communication, and stakeholder management skills, with the ability to work independently, manage competing priorities, and partner effectively across technical and business teams
• Experience using security awareness and training tools (examples: KnowBe4 and Proofpoint)

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

Company Overview