Role Summary
The Security Analyst is responsible for the day-to-day implementation, monitoring, analysis, and maintenance of the organization's cybersecurity controls. This role supports identity and access management, endpoint and network security, vulnerability management, security monitoring, incident response, compliance, and security awareness.
Key Responsibilities
- Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
- Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
- Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
- Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
- Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
- Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
- Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
- Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
- Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
- Maintain security documentation, incident records, technical procedures, and remediation tracking.
Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field, or equivalent relevant technical experience.
- 3 to 5 years of IT experience, preferably including systems, networking, Microsoft 365, or cybersecurity responsibilities.
- 1 to 3 years of direct information-security experience preferred.
- Relevant certifications preferred, such as CompTIA Security+, CySA+, Microsoft SC-200, SC-300, or SC-400.
Key Skills: Security Operations, Incident Response, Threat Detection, Splunk SIEM, Microsoft Entra ID, Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Identity and Access Management, Vulnerability Management, Risk Assessment, Security Auditing, NIST SP 800-171, CMMC, ISO 27001 Compliance, Network Security, Firewall and VPN Administration, Root Cause Analysis, Technical Documentation, Security Awareness Training, Technical Writing and Root-cause analysis.
