[Hiring] Security Analyst I @Command Alkon

Role Description

The Security Analyst I exists to help protect Command Alkon's systems, data, and customers by keeping security operations running day to day. The role sits in Security Operations within TechOps and works closely with the Security Manager. The analyst watches security alerts and event logs across endpoints, networks, and cloud systems, triages and escalates issues, and helps respond to incidents under senior guidance. That work protects the platform that heavy building materials suppliers, haulers, and contractors depend on.

The analyst also drives outcomes through vulnerability management and access reviews, which means scanning systems, tracking fixes, and following up with system owners until findings close. Compliance support is part of the same loop, with evidence collection, control testing, and audit preparation that keep the company's security posture provable to customers and auditors.

The analyst collaborates across IT, engineering, and system owners who fix the findings, and documents policies, procedures, and runbooks so the team can repeat what works. Because the role is fully remote, close coordination with the team through tickets and documentation is essential, and it builds the foundation for a path toward a mid-level analyst role.

Qualifications

• Foundational networking knowledge: TCP/IP, DNS, and firewalls.
• Working knowledge of Windows and macOS.
• Log and alert triage across endpoint, network, and cloud systems.
• Vulnerability scanning and remediation tracking.
• Access review and provisioning or deprovisioning audit support.
• Basic scripting in Python, PowerShell, or Bash.
• 0-2 years in security, IT, or a related technical field, including internships, help desk, or sysadmin work.

Requirements

• Triage every monitoring alert in the queue, escalating real issues to the Security Manager with clear notes.
• Close assigned vulnerability findings on schedule, and follow up with each system owner until the fix is verified.
• Complete access review and deprovisioning audits on time, with every exception documented and assigned to an owner.
• Keep policies, procedures, and runbooks current, so a teammate can follow them without asking questions.
• Collect audit evidence before each request is due, so control testing and audit prep do not stall.
• Document incidents accurately during response and complete post-incident follow-up tasks on time.
• Track every security ticket from open to resolution, with status updates that the team can act on without asking.
• Learn the company's environment well enough to tell routine alerts from ones that need escalation.
• Take on additional tasks as skills grow and say clearly when a task is beyond current skill so it can be reassigned.
• Communicate in writing with clear, complete detail, since documentation is a core part of the job.
• Work well in a remote setting by posting status early, responding to team messages promptly, and asking for help before a blocker grows.
• Build toward a mid-level analyst path by picking up one new skill at a time, such as scripting, a cloud security concept, or a SIEM workflow.

Company Description