The Special Projects Information Security Analyst will serve as a key individual contributor supporting Major League Baseball’s Email Security and Cloud Security team. This role focuses on operational execution, technical analysis, and project coordination across two critical domains: email security engineering and cloud security analysis.

The analyst will work hands-on with security tools, processes, and data, helping to protect MLB’s communications, cloud environments, and infrastructure from evolving threats. This position offers the opportunity to learn from subject matter experts while contributing to the successful delivery of high-impact security initiatives.

Responsibilities

Cloud Security Analysis

• Assist in the deployment, configuration, and monitoring of cloud security controls across public and private clouds (e.g., logging & monitoring, WAF, API security gateways, anti-bot/fraud technologies).
• Support vulnerability scanning, compliance checks, and incident investigation in cloud environments using industry leading tools.
• Help integrate and validate security tooling within CI/CD pipelines.
• Conduct basic log and traffic analysis to identify anomalous or suspicious activity.

Email Security Support

• Assist with the configuration, monitoring, and maintenance of MLB’s email security platforms (e.g., Microsoft Defender for Office 365, Exchange Online Protection, multiple integrated and secure email gateways).
• Support phishing detection, triage, and remediation efforts.
• Help manage authentication protocols (SPF, DKIM, DMARC, BIMI, VMC) across the league.
• Participate in tuning email security policies, blocklists, and advanced rules to reduce false positives and improve detection.

Operational Execution

• Maintain accurate Jira/Asana ticketing, change documentation, and configuration records for security systems.
• Support proof-of-concept testing for new security tools, documenting results for engineering review.
• Use scripting languages (Python, Go, PowerShell, Bash) to automate security processes and streamline reporting.
• Interact with REST, GraphQL APIs and MCP Servers for security tool integration and data collection.

Research & Documentation

• Stay current on email-based and cloud-based threat trends, summarizing findings for engineering teams.
• Create and update SOPs, runbooks, and security awareness materials.
• Assist with audit and compliance documentation, ensuring alignment with MLB policies and industry standards.

Qualifications & Skills

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field — or equivalent practical experience.
• 2+ years in an information security, SOC, IT operations, or related technical role.
• Familiarity with email authentication protocols (SPF, DKIM, DMARC) and cloud security fundamentals.
• Exposure to security tools such as Microsoft Defender for Office 365, Exchange Online Protection, WAFs, and API gateways.
• Proficiency in at least one scripting language (Python, Go, PowerShell, Bash).
• Ability to analyze logs, alerts, and security telemetry to support incident investigation.
• Comfort working with APIs and automation frameworks.
• Familiarity with collaboration and tracking tools (e.g., Jira, Asana, Confluence, GitHub).
• Strong organizational skills; able to manage multiple tasks and shifting priorities.
• Excellent written and verbal communication; able to translate technical details for varied audiences.
• Discreet and professional when handling sensitive information.
• Proactive problem solver with an interest in continuous learning and professional growth.

Pay Range: $30.00 - $33.00 per hour

The actual offer will carefully consider a wide range of factors, including your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision.