Apply on Employer Site

The Loomis Company · 3 weeks ago

IT SECURITY ANALYST/NETWORK ADMINISTRATOR

Reading, PA

Full-time

Onsite

Mid Level

3+ years exp

The Loomis Company is focused on enhancing corporate security efforts and is seeking an IT Security Analyst/Network Administrator. This role involves managing and monitoring enterprise-wide security solutions, conducting risk assessments, and ensuring regulatory compliance to strengthen the company’s cyber resilience.

Commercial InsuranceInsuranceInsurTech

Responsibilities

Develop, implement, and maintain security policies and procedures to protect all information technology systems

Conduct ongoing risk assessments, including internal/external penetration testing coordination via Rapid7 , and vulnerability management using Tenable Security

Perform regular inventory assessments of all technology systems and configurations to identify and remediate security gaps

Manage patching schedules and coordinate remediation efforts with infrastructure and application teams

Maintain security requirements documentation, vendor commitments (e.g., Empower Web App & Doc Scan ), and regulatory checklists for frameworks like SOC 2 and HIPAA

Lead internal training and awareness programs, including KnowBe4 phishing simulation and user-based training

Oversee and investigate violations of security policies, document findings and lead resolution protocols

Administer and enforce user profile and password standards across enterprise systems, leveraging EntraID for identity and access management

Assist with Business Continuity Plan testing and updates

Coordinate and manage security vendors, including:

+ SonicWall NetExtender VPN for secure remote connectivity

+ Cisco FirePower for firewall and intrusion prevention

+ Barracuda Empower for web app security and document scanning

+ Zix and ProofPoint (email threat protection and secure messaging)

+ CrowdStrike Falcon Complete for endpoint threat detection and response

Manage compliance and renewal of SOC 2 certification and similar audit processes

Keep senior leadership informed on security posture, metrics, and risk trends

Assist in other network and server support as requested

Qualification

Cybersecurity operationsCompliance frameworksSecurity tools knowledgeRisk assessmentsVendor managementAnalytical skillsDocumentation skillsCommunication skills

Required

Bachelor's degree in information security, Computer Science, or a related field

Minimum 3 years' experience in cybersecurity operations or equivalent combination of education and experience

Familiarity with a wide range of tools, including but not limited to Rapid7, CrowdStrike, Cisco FirePower, SonicWall, Tenable, KnowBe4, EntraID, Barracuda, and ProofPoint

Working knowledge of compliance frameworks (SOC 2, HIPAA)

Strong analytical, documentation, and communication skills

In-depth knowledge of modern cyber threats and security tools

Ability to deliver clear reports and presentations to technical and non-technical audiences

Ability to manage third-party vendors and track security-related financial commitments

Timely issue resolution and professional communication across departments