Cyber Security Analyst

We are looking for a Cyber Security Analyst to strengthen day-to-day security operations and help protect cloud and enterprise environments. This position is suited for a detail-oriented individual who can assess alerts, support investigations, and maintain clear records across incidents, vulnerabilities, and compliance activities. The role works closely with security, IT, and business stakeholders to identify risks, improve visibility, and support timely remediation of security issues.

Responsibilities:

• Review and validate security findings from endpoint and threat detection tools, then escalate confirmed concerns to the appropriate security leaders and engineering teams.

• Watch for suspicious activity across monitoring platforms beyond managed service coverage and perform initial analysis of unusual events.

• Examine emerging security issues, including AI-related threats and abnormal behavior, and route concerns for further action when needed.

• Document monitoring blind spots, identity control weaknesses, and other visibility gaps, then share recommendations with engineering partners.

• Assist with incident response by collecting evidence, building event timelines, supporting containment actions, and maintaining accurate case records.

• Carry out first-level investigations into security alerts, potential policy breaches, and other indicators of compromise.

• Track vulnerability and exposure findings, follow remediation progress, and highlight changes in severity or business risk.

• Coordinate support for patching follow-up, penetration testing activities, and remediation documentation to help close identified security gaps.

• Gather and organize technical evidence for audits, control reviews, and annual compliance requirements while keeping supporting documentation current.

• Participate in an on-call rotation to help address escalated security incidents and urgent operational events.

Requirements

• At least 2 years of experience in cybersecurity, IT operations, or a closely related technical discipline.
• Hands-on background in security monitoring, alert assessment, and incident support within a business or enterprise setting.
• Familiarity with endpoint detection and response or managed threat monitoring platforms, with exposure to CrowdStrike considered beneficial.
• Working knowledge of access controls, encryption practices, network defense, vulnerability management, and incident handling processes.
• Understanding of cloud security fundamentals such as logging, posture monitoring, and identity management across platforms like AWS or Azure.
• Ability to produce thorough documentation, maintain evidence records, and follow disciplined escalation procedures.
• Strong communication skills with the ability to collaborate effectively across security, infrastructure, and business teams.
• Experience with tools or environments such as Active Directory, Microsoft SQL Server, system analysis practices, ticketing platforms, or comparable enterprise technologies is a plus.