Associate Analyst, Cyber Security

The Associate Analyst, Cybersecurity is an entry-level security role for a motivated individual with an IT foundation who is actively building security knowledge. Working under close direction of the Senior Analyst and Director of Information Security, this person executes day-to-day security tasks accurately, escalates early, documents thoroughly, and grows steadily toward Analyst I proficiency. 

Security Monitoring & Incident Response 

• Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently. 

• Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated. 

• Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment. 

• Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight. 

• Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process. 

Vulnerability Management 

• Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution. 

• Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications. 

• Verify remediation activities to confirm vulnerabilities are fully resolved. 

• Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently. 

Identity & Access Security 

• Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction. 

• Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval. 

• Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst. 

Vendor & Third-Party Risk 

• Gather vendor documentation and complete questionnaire sections as directed; does not independently evaluate or rate vendor risk. 

• Complete vendor questionnaire entries accurately; flag anything unclear to the Senior Analyst. 

• Keep third-party risk register records current as directed; does not modify risk ratings without Senior Analyst approval. 

• Participate in software onboarding reviews prior to procurement approval. 

Security Governance, Compliance & Awareness 

• Assist with maintaining InfoSec policies and procedures; support internal audits and compliance reviews. 

• Administer phishing simulations, coordinate security training assignments, and track completion rates. 

• Contribute to disaster recovery documentation and tabletop exercises. 

• Stay current on emerging threats and developments relevant to higher education. 

Required

• Bachelor’s degree from an accredited institution in any field; IT or technical background a plus
• Experience in IT support, helpdesk, or systems administration; no prior cybersecurity experience required
• Basic familiarity with Microsoft 365 and Windows; M365 security tool experience a plus
• General understanding of user accounts, permissions, and access concepts from an IT perspective
• Strong written and verbal communication skills; able to document findings clearly

Preferred

• CompTIA Security+ in progress or planned within first 12 months
• Hands-on exposure via home labs, TryHackMe, Hack The Box, or similar platforms
• Demonstrated curiosity about cybersecurity through self-study or personal projects
• Experience with ticketing systems such as FreshService or ServiceNow
• Pursuit of a degree or certification in cybersecurity or information technology