Security Analyst - Threat & Vulnerability

Old Republic is a leading specialty insurer that operates diverse property & casualty, as well as title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

Old Republic is seeking a Security Analyst to support the day‑to‑day execution of cybersecurity operations and security programs across the organization. This role plays a key part in monitoring, analyzing, and improving the organization’s security posture by handling security alerts and reports end‑to‑end, coordinating remediation with stakeholders, and contributing to the continuous improvement of core security processes.

Essential Job Functions:

• Monitor, investigate, and manage security alerts, events, and reports end‑to‑end, escalating and coordinating remediation as needed.
• Analyze security data to identify trends, control gaps, and improvement opportunities.
• Support the development, implementation, and continuous improvement of security policies, standards, and procedures aligned with industry frameworks.
• Perform and support risk assessments, control evaluations, compliance reviews, and reporting of identified risks.
• Operate, maintain, and document security tools and platforms, ensuring configurations are effective and auditable.
• Prepare reports, dashboards, metrics, and trend analyses to communicate security posture and program effectiveness.
• Collaborate with infrastructure, application, and business teams to support timely remediation of findings.
• Contribute to security awareness efforts and provide security best‑practice guidance to stakeholders.
• Maintain awareness of emerging threats, techniques, and risks relevant to the organization’s environment.
• Maintain security documentation, procedures, and evidence required for audit and compliance efforts.
• Participate in a rotating on‑call schedule to support off‑hours monitoring, investigation, and response to security incidents as required.
• Effectively manage multiple concurrent alerts, investigations, and tasks while meeting response and remediation timelines.
• Perform other duties as assigned.

Qualifications:

• 2–4 years of relevant cybersecurity or IT security experience, or a Bachelor’s degree in a related field.
• Strong analytical and problem‑solving skills, with the ability to evaluate security risks and recommend remediation.
• Working knowledge of security operations disciplines such as monitoring, incident response, logging, and threat or vulnerability analysis.
• Familiarity with common security frameworks, regulatory requirements, or control standards.
• Experience preparing clear reports, documentation, and metrics for technical and non‑technical audiences.
• Demonstrated ability to multitask effectively, prioritize competing demands, and operate in a fast‑paced security operations environment.
• Ability to work independently and collaboratively while managing multiple priorities.
• Strong written and verbal communication skills.
• Experience monitoring and tuning SIEM platforms, including log analysis and alert development.
• Hands‑on experience with security monitoring and incident response, including triage and containment.
• Familiarity with endpoint, network, and infrastructure logging sources.
• Experience documenting incident handling and operational activities.
• Exposure to malware analysis, host‑based forensics, or event correlation concepts.

ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.