The posting
A security analyst plays a vital role in protecting the organization’s digital assets, networks, and infrastructure against cyber threats. This candidate will monitor security tools, perform analysis and triage on escalated threats from our external SOC, investigate potential incidents, perform daily threat hunts, and support threat remediation workflows. This role is ideal for a proactive detailed-oriented professional who looks to build a strong foundation in enterprise incident response, threat detection and security posture maintenance.
Key Responsibilities include, but are not limited to other responsibilities as assigned:
- Alert Triage and Monitoring Triage alerts from Microsoft tools, such as Defender XDR, Intune, Purview, and email gateway security solutions Conduct initial analysis to distinguish genuine security incidents between false positives and benign positives Escalate P1 alerts to leadership and fellow security analysts in accordance with established SLAs.
- Incident Response and Investigations Execute response playbooks according to NIST SP 800-61/cyber kill chain standards for common threat vectors such as phishing, malware executive, unauthorized access, and compromised accounts Apply containment measures including isolating affected endpoints, revoking compromised sessions, resetting of credentials, and blocking malicious indicators (IOCs).
- Continuous Improvement and Documentation Contribute to the development and improvement of security awareness training and materials for employees. Maintain precise, detailed reports of investigation tickets, triage steps and containment actions Provide feedback to leadership and the external SOC to refine SIEM correlation rules, detection logic, and internal colleagues to reduce alert fatigue.
- ServiceDesk Dashboard Contribute to resolving incident and service request tickets that are assigned to the Cybersecurity team
Qualifications & Skills
- Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology is preferred but will ascertain 5+ years hands-on experience in place of a degree
- Certifications such as CompTIA Security+, CySA+, CEH (Certified Ethical Hacker) is preferred
- Experience with modern EDR solutions (e.g. MS Defender XDR, Crowdstrike, SentinelOne) and SIEM
- Familiarity with phishing review workflows and email header analysis
- Experience with scripting languages (e.g., Python, PowerShell, Kusto Query Language (KQL) as its advanced threat-hunting) is a plus.
- Soft analytical thinking and structured problem-solving abilities under pressure.
- Ability to work independently and collaboratively within a team environment.
- Clear written and verbal communication for incident documentation and cross-team collaboration.
- Passion for continuous learning and keeping up to tactics, techniques, and procedures (TTPs).
