Security Analyst I

Job Description

Job Summary

The Security Analyst I - Identity supports the organization's identity and access management (IAM) operations. This role focuses on maintaining secure and efficient access to systems and applications, working primarily with IAM platforms such as Okta, Saviynt, and Delinea. The analyst assists in monitoring identity infrastructure health, including Active Directory (AD), IBM Tivoli LDAP, and associated agents and custom application and workflows, ensuring consistent and secure user access across the enterprise.

Primary Duties, Responsibilities And Deliverables

• Document identity management processes and contribute to continuous improvement initiatives.
• Participate in audits and reporting related to identity systems and access controls.
• Ensure compliance with security policies and procedures related to identity and access management.
• Collaborate with senior analysts to troubleshoot and resolve identity-related issues.
• Monitor and maintain the health of identity infrastructure components such as Active Directory (AD), IBM Tivoli LDAP, and associated agents for Okta, Delinea, and Saviynt.
• Support user provisioning, de-provisioning, and access reviews using IAM tools.
• Assist in managing identity and access management (IAM) systems including Okta, Saviynt, and Delinea.
  
  
  

General Knowledge And Skills

Technical Skills

• Identity and Access Management (IAM): Basic understanding of IAM principles, including provisioning, de-provisioning, and access reviews.
• Okta Administration: Familiarity with user lifecycle management, SSO configuration, and MFA policies.
• Saviynt: Exposure to access governance, role-based access control, and compliance reporting.
• Delinea (formerly Thycotic): Understanding of privileged access management (PAM) and vault operations.
• Active Directory (AD): Experience with user/group management, GPOs, and directory health monitoring.
• LDAP (IBM Tivoli LDAP): Basic knowledge of directory queries, schema, and replication.
• Agent Monitoring: Ability to check and troubleshoot IAM agents for Okta, Saviynt, and Delinea.
• Scripting: Basic PowerShell or Python for automation and reporting tasks.
  
  
  

Security & Compliance

• Access Control Policies: Understanding of least privilege, segregation of duties, and role-based access.
• Audit & Compliance Support: Ability to assist with identity-related audits and generate access reports.
• Incident Response: Basic skills in identifying and escalating identity-related security incidents.
  
  
  

Operational & Analytical Skills

• Troubleshooting: Ability to diagnose and resolve identity-related issues.
• Documentation: Skill in maintaining process documentation and runbooks.
• Monitoring Tools: Familiarity with dashboards and alerts for IAM and infrastructure health.
• Data Analysis: Ability to interpret logs and access data for anomalies or trends.
  
  
  

Soft Skills

• Communication: Clear and professional interaction with IT teams and end users.
• Collaboration: Team-oriented mindset, especially when working with senior analysts or cross-functional teams.
• Attention to Detail: Precision in managing access rights and documenting changes.
• Adaptability: Willingness to learn new tools and respond to evolving security needs.
  
  
  

Minimum Qualifications

• Bachelor's Degree/4-year Degree in information Technology or other Technical degree
• 3 or more years of combined IT and security work experience with extensive exposure conducting network security vulnerability assessments, penetration testing, or other related experience using advanced networking tools and security solutions as well as non-traditional techniques and methodologies and at least two (2) or more years of experience intelligence collection, analysis, and reporting process/procedures or two (2) or more years of experience in bug bounty programs, security research.
  
  
  

 Job Requirements

• Work hours may vary in length and schedule (may include a non-standard work week)
  
  
  

About Us

CSX is passionate about building a workforce that reflects the values and behaviors of ONE CSX. We are nationally recognized for our commitment to diversity and engagement, as well as our support for veterans and reservists.

CSX, based in Jacksonville, Florida, is a premier transportation company. It provides rail, intermodal and rail-to-truck transload services and solutions to customers across a broad array of markets, including energy, industrial, construction, agricultural, and consumer products. For nearly 200 years, CSX has played a critical role in the nation's economic expansion and industrial development. Its network connects every major metropolitan area in the eastern United States, where nearly two-thirds of the nation's population resides. It also links more than 230 short-line railroads and more than 70 ocean, river and lake ports with major population centers and farming towns alike. More information about CSX Corporation and its subsidiaries is available at www.csx.com. Connect with us on Facebook X LinkedIn Instagram YouTube

Closing Statement

At CSX, two of our five Guiding Principles are Valuing and Developing Employees as well as Operating Safely. We are committed to offering our team members the most competitive compensation and benefits package available, unlimited opportunities for development and growth throughout an exciting and rewarding career, and the safest work environment possible.

CSX is an Equal Opportunity Employer Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Click here to view the EEO is Law poster. Click here to view the OFCCP pay transparency provision information.

CSX Transportation and its subsidiaries are not seeking outside assistance or accepting unsolicited resumes from staffing agencies or search firms for employment or contractor opportunities. Any resumes submitted by an outside vendor to any employee at CSX via e-mail, Internet, or directly to hiring managers without a valid written search agreement in place with the Talent Acquisition / HR department will be deemed the sole property of CSX. No placement fee will be paid in the event a candidate is hired as a result of the referral, or through other means.

This role offers an annual salary range based on experience and qualifications. In addition to base salary we provide an annual bonus opportunity.

At CSX, we prioritize valuing and developing employees, as well as operating safely. We are committed to offering our team members competitive compensation, a comprehensive benefits package, and unlimited growth opportunities. Our benefits support financial, physical, emotional, and social well-being, with health plans, wellness programs, and customizable coverage options. Learn more about our benefits here .