The Special Projects Information Security Analyst will serve as a key individual contributor supporting Major League Baseball’s Email Security and Cloud Security team. This role focuses on operational execution, technical analysis, and project coordination across two critical domains: email security engineering and cloud security analysis.
The analyst will work hands-on with security tools, processes, and data, helping to protect MLB’s communications, cloud environments, and infrastructure from evolving threats. This position offers the opportunity to learn from subject matter experts while contributing to the successful delivery of high-impact security initiatives.

QUALIFICATIONS & SKILLS

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field — or equivalent practical experience.
• 2+ years in an information security, SOC, IT operations, or related technical role.
• Familiarity with email authentication protocols (SPF, DKIM, DMARC) and cloud security fundamentals.
• Exposure to security tools such as Microsoft Defender for Office 365, Exchange Online Protection, WAFs, and API gateways.
• Proficiency in at least one scripting language (Python, Go, PowerShell, Bash).
• Ability to analyze logs, alerts, and security telemetry to support incident investigation.
• Comfort working with APIs and automation frameworks.
• Familiarity with collaboration and tracking tools (e.g., Jira, Asana, Confluence, GitHub).
• Strong organizational skills; able to manage multiple tasks and shifting priorities.
• Excellent written and verbal communication; able to translate technical details for varied audiences.
• Discreet and professional when handling sensitive information.
• Proactive problem solver with an interest in continuous learning and professional growth.
  Pay Range: $30.00 - $33.00 per hour
  The actual offer will carefully consider a wide range of factors, including your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision.

WHY MLB?

Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come.
MLB is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Cloud Security Analysis

• Assist in the deployment, configuration, and monitoring of cloud security controls across public and private clouds (e.g., logging & monitoring, WAF, API security gateways, anti-bot/fraud technologies).
• Support vulnerability scanning, compliance checks, and incident investigation in cloud environments using industry leading tools.
• Help integrate and validate security tooling within CI/CD pipelines.
• Conduct basic log and traffic analysis to identify anomalous or suspicious activity.

Email Security Support

• Assist with the configuration, monitoring, and maintenance of MLB’s email security platforms (e.g., Microsoft Defender for Office 365, Exchange Online Protection, multiple integrated and secure email gateways).
• Support phishing detection, triage, and remediation efforts.
• Help manage authentication protocols (SPF, DKIM, DMARC, BIMI, VMC) across the league.
• Participate in tuning email security policies, blocklists, and advanced rules to reduce false positives and improve detection.

Operational Execution

• Maintain accurate Jira/Asana ticketing, change documentation, and configuration records for security systems.
• Support proof-of-concept testing for new security tools, documenting results for engineering review.
• Use scripting languages (Python, Go, PowerShell, Bash) to automate security processes and streamline reporting.
• Interact with REST, GraphQL APIs and MCP Servers for security tool integration and data collection.

Research & Documentation

• Stay current on email-based and cloud-based threat trends, summarizing findings for engineering teams.
• Create and update SOPs, runbooks, and security awareness materials.
• Assist with audit and compliance documentation, ensuring alignment with MLB policies and industry standards.