The Information Security Analyst I supports security operations by monitoring and investigating security events, assisting with incident response activities, reviewing security controls, and producing clear documentation and reporting. This position works collaboratively with the Security Incident Response Manager, Project team, Helpdesk Support team, and other technical stakeholders to identify, prioritize, and help mitigate security risks and vulnerabilities across BCS365-managed environments.
The role requires sound judgment, attention to detail, professional communication, and the ability to follow established incident-response, documentation, and escalation procedures. The analyst is expected to maintain accurate case records, protect confidential information, and communicate findings in a timely and appropriate manner.
Key Considerations:
- Must be authorized to work in the U.S.
- This is a full-time, direct hire position.
- Schedule: Monday - Friday, 8:00 AM - 5:00 PM (ET)
- While working from home, employees must have a reliable internet connection and must work in an environment free of noise and distraction.
- Compensation Disclaimer: The pay range listed for this position is based on market data across various U.S. locations and reflects the company’s good faith estimate of what it reasonably expects to pay. Actual compensation may vary depending on geographic location, relevant experience, and other job-related factors. This range also accounts for potential growth and progression within the role. Final compensation will be determined after a successful interview process and may be discussed in more detail during later stages.
Essential Duties and Responsibilities Security Operations and Event Monitoring
- Monitor and triage alerts, events, and findings from security, endpoint, identity, email, network, and cloud-security platforms in accordance with established BCS365 procedures.
- Perform analysis to validate alerts, distinguish likely false positives from actionable activity, gather relevant evidence, and document findings.
- Escalate suspicious, high-impact, or time-sensitive activity through the designated security escalation path using established severity and notification criteria.
- Track assigned investigations through completion, maintain case hygiene, and ensure supporting evidence, timelines, and decisions are recorded accurately.
Incident Investigation and Response Support
- Support investigation of suspected security incidents, including phishing, malware, credential compromise, anomalous authentication, endpoint detections, and unauthorized configuration changes.
- Collect and correlate information from available security and IT operations tools to help establish scope, impact, affected assets, affected users, and likely root cause.
- Assist with containment, recovery, and post-incident activities within approved procedures and assigned authority.
- Preserve confidentiality, maintain appropriate handling of incident data, and follow evidence-handling and documentation standards.
- Support periodic security-control assessments, configuration reviews, and compliance evidence collection for BCS365 and client environments.
- Identify recurring control gaps, operational risks, or process weaknesses and communicate practical recommendations to management.
- Partner with Project and Helpdesk teams to coordinate risk-reduction actions, validate remediation, and document outcomes.
Documentation, Reporting, and Collaboration
- Create and maintain investigation notes, incident summaries, playbooks, knowledge articles, technical procedures, and customer-facing or internal reports as assigned.
- Prepare clear status updates and metrics related to alert volume, incident trends, vulnerabilities, response performance, and recurring risks.
- Collaborate constructively with Helpdesk, Project, Infrastructure, and Security teams to ensure incidents and remediation tasks are properly routed and resolved.
- Contribute to continuous improvement of security operations by identifying opportunities for process refinement, detection tuning, automation, and knowledge sharing.
Competencies, Skills, and Qualifications Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; or equivalent relevant education, certifications, and/or experience.
- 3+ years of experience in information security, IT operations, helpdesk support, system administration, network administration, or a related technical role.
- Technical background supporting, administering, configuring, or troubleshooting the backend of multiple cloud security platforms or tools
- Proficient understanding of security principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management.
- Proficient understanding of common security events and threats, including phishing, malware, account compromise, suspicious authentication, endpoint detections, and vulnerability exploitation.
- Familiarity with Windows operating systems, endpoint management concepts, networking fundamentals, Active Directory or cloud identity concepts, and Microsoft 365 or similar SaaS environments.
- Ability to read and interpret logs, alerts, and technical data; organize evidence; and document observations accurately.
- Strong written and verbal communication skills, including the ability to explain technical findings clearly to technical and non-technical stakeholders.
- Demonstrated attention to detail, sound judgment, ability to handle confidential information, and willingness to follow documented processes and escalation paths.
- Ability to prioritize competing work, remain calm during time-sensitive events, and work collaboratively in a team-oriented, managed services environment.
Preferred Qualifications
- Previous experience working for an MSSP or MSP, or supporting multiple customer environments in a customer-facing security role.
- Experience with one or more security platforms, such as SIEM, EDR/XDR, email security, vulnerability management, identity security, network security, or security awareness tools.
- Exposure to incident response processes, ticketing systems, managed service operations, and IT documentation standards.
- Working knowledge of common security and compliance frameworks, such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, HIPAA, PCI DSS, or SOC 2.
- Relevant security certifications, such as CompTIA Security+, Microsoft security certifications, or other vendor-specific cloud-security certifications.
- Basic scripting or query skills - for example, PowerShell, KQL, SQL, or Python - used for investigation, reporting, or task automation.
- Experience supporting, administering, configuring, or troubleshooting the backend of Microsoft Entra and/or Crowdstrike.
Core Competencies
- Analytical thinking and curiosity: investigates issues methodically, validates assumptions with evidence, recognizes that unverified assumptions can lead to security compromise, and escalates when risk, impact, or uncertainty requires additional review.
- Security mindset: considers business impact, client confidentiality, risk reduction, and appropriate handling of sensitive information.
- Operational discipline: follows runbooks, maintains accurate documentation, and completes work with attention to quality and timeliness.
- Collaboration: builds effective working relationships across Security, Helpdesk, Project, and client-facing teams.
- Continuous learning: stays current on relevant threats, technologies, processes, and professional development opportunities.
Work Environment and Expectations
- May be required to provide scheduled support during holidays or outside normal business hours, as business and client requirements dictate.
- Must be able to work with sensitive client, employee, and security information while adhering to BCS365 confidentiality, acceptable use, and security policies.
- Role responsibilities may evolve based on client needs, operational maturity, security tooling, and organizational priorities.
- Must be able to communicate effectively using standard business communication tools.
- This role primarily operates in a professional office or remote work environment. The employee is regularly required to use a computer, communicate verbally and in writing, and remain stationary for extended periods. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.
Development Expectations
- Build deeper technical expertise in BCS365 security platforms, including their configuration, administration, integrations, tuning, and troubleshooting.
- Progress toward independently investigating and resolving routine security events while applying established procedures and escalation criteria.
- Develop working knowledge of client environments, security controls, network security technologies, and managed services operational practices.
- Pursue professional development and role-relevant certifications, such as SSCP, CompTIA CySA+, Microsoft SC-200, CCNP Security, CEH, cloud security certifications, and certifications aligned with BCS365-supported security platforms
- Demonstrate continuous improvement in investigation quality, documentation, communication, and collaboration with internal teams and clients.
This job description is intended to describe the general nature and level of work performed by employees assigned to this position. It is not intended to be an exhaustive list of all duties, responsibilities, qualifications, or working conditions. BCS365 reserves the right to modify, add, or remove duties and responsibilities as business needs require, with or without notice, in accordance with applicable law.
Perks & Benefits
- Insurance Coverage: Health, Dental, Vision, Life/AD&D, Short-Term Disability, Long-Term Disability, Accident, Hospital Indemnity, Critical Illness, Cancer Indemnity
- Paid Time Off (Vacation, Holidays, Birthday)
- 401k Retirement Plan with Company Match
- Flexible Spending Account, Health Savings Account
- Paid Parental Leave
- Peer-to-Peer Recognition
- Learning and Development
- Pet Insurance
- Fun On and Off-Site Events
- Referral Bonus Program
- Employee Assistance Program
