A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture. Position Overview
- Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
- Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
- Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
- Support incident response activities including containment, remediation, recovery, and post-incident reviews.
- Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
- Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
- Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
- Create and maintain security procedures, runbooks, metrics, and technical documentation.
- Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
- Participate in an on-call rotation supporting critical cybersecurity incidents.
- 3+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
- Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
- Experience writing and modifying Kusto Query Language (KQL) queries.
- Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
- Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
- Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
- Strong analytical, troubleshooting, and investigative skills.
- Ability to effectively communicate with both technical and non-technical stakeholders.
- Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
- Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred.