Cyber Security Analyst

Overview:

The Cyber Security Analyst is responsible for protecting the organization's information assets through proactive monitoring, threat detection, incident response, vulnerability management, and operational security activities. The role supports the IT Cyber Security Manager in executing the organization's cybersecurity strategy and maintaining a secure technology environment. 
 
The Cyber Security Analyst serves as a trusted advisor by balancing cybersecurity risk with business objectives and helping ensure the organization's security program aligns with industry frameworks including the NIST Cybersecurity Framework (CSF 2.0), CIS Critical Security Controls, and Microsoft Security Best Practices. 
 
The Cyber Security Analyst is expected to exercise sound judgment, communicate effectively with technical and non-technical stakeholders, and escalate risks and significant security events to the IT Cyber Security Manager when appropriate. 

Key Responsibilities:

• Security Operations 
  • Monitor and investigate security events across endpoints, identity, email, cloud, and network security platforms. 
  • Analyze alerts and coordinate response actions. 
  • Assist with incident response, documentation, and threat hunting. 
  • Manage PKI infrastructure on Prem and in the cloud 
  • Assist Development teams with remediation of vulnerabilities using WIZ 
• Vulnerability & Risk Management
  • Prioritize vulnerabilities based on business risk. 
  • Coordinate remediation and validate corrective actions. 
  • Assist with penetration testing and remediation tracking. 
• Identity, Cloud & Endpoint Security 
  • Monitor Entra ID, endpoint security, Microsoft 365, and privileged access. 
  • Review application permissions and service principals. 
• AI Security & Governance 
  • Support secure AI adoption. 
  • Monitor for Shadow AI. 
  • Evaluate AI solutions for security and privacy risks. 
• Security Engineering & Administration 
  • Administer and tune cybersecurity technologies. 
  • Develop security automation using PowerShell or Microsoft Graph. 
• Governance, Risk & Compliance 
  • Support NIST CSF 2.0, CIS Controls, audits, documentation, and risk assessments. 
• Security Awareness & Collaboration 
  • Support awareness training. 
  • Collaborate across IT and business teams. 
  • Stay current on emerging threats. 

• Other duties as assigned.

Qualifications:

Required:

• Bachelor's degree or equivalent experience. 
• 3–5 years of cybersecurity or security-focused systems administration experience. 
• Strong analytical and communication skills. 
• Working knowledge of Windows Server, Active Directory, networking, and Microsoft 365.

Preferred:

• Experience
  • Microsoft Defender suite, Entra ID, Purview, Sentinel, Intune 
  • CrowdStrike, Fortinet, Endpoint Central 
  • Azure, PowerShell, Microsoft Graph API 
  • Experience with Wiz or similar cloud security platforms 
• Certifications
  • Security+ 
  • CySA+ 
  • SC-200 
  • SC-300 
  • AZ-500 
  • CISSP (or pursuing) 

Physical Requirements:

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job.  Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.  While performing the duties of this job, the employee is regularly required to stand; use hands to finger, handle, or feel; reach with hands and arms; stoop, kneel, crouch, talk and/or hear. The employee is frequently required to sit. The employee occasionally lift and/or move objects/equipment up to 35 pounds.  

Work Environment:

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.