PlutoSec is a leading multinational cybersecurity company providing advanced security consulting and managed security services across the United States, Canada, and the United Kingdom. We specialize in penetration testing, vulnerability assessments, cloud security, red teaming, incident response, compliance readiness, managed security services, and 24/7 SOC monitoring.
As we continue expanding our USA operations, we are looking for a motivated Cybersecurity Analyst who is passionate about investigating security threats, identifying vulnerabilities, and helping organizations strengthen their cybersecurity posture.
Key Responsibilities
- Monitor and investigate security alerts, events, and system logs using SIEM and security monitoring platforms.
- Identify suspicious activities, malware, phishing attempts, unauthorized access, and potential security incidents.
- Conduct vulnerability assessments across networks, endpoints, cloud environments, and web applications.
- Analyze security vulnerabilities and provide practical, risk-based remediation recommendations.
- Support penetration testing, cloud security assessments, and security configuration reviews.
- Review firewalls, identity controls, endpoint security, Microsoft 365, AWS, Azure, and other cloud environments.
- Assist with incident response, evidence collection, containment, recovery, and post-incident reporting.
- Track emerging cyber threats, vulnerabilities, indicators of compromise, and security advisories.
- Prepare professional technical reports and executive-level security summaries.
- Support clients with remediation, patch management, security hardening, and compliance requirements.
- Contribute to projects aligned with NIST, CIS Controls, ISO 27001, SOC 2, PCI DSS, and HIPAA.
- Collaborate with penetration testers, red teamers, cloud engineers, and client IT teams.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
- Two or more years of experience in cybersecurity, security operations, vulnerability management, or information security.
- Strong understanding of networking, Windows, Linux, Active Directory, cloud infrastructure, and common cyberattack techniques.
- Experience with SIEM, vulnerability scanning, endpoint security, and network analysis tools.
- Familiarity with tools such as Wazuh, Microsoft Sentinel, Splunk, Nessus, Qualys, Nmap, Wireshark, and Burp Suite.
- Knowledge of incident response, vulnerability management, threat detection, and security hardening.
- Strong written and verbal communication skills.
- Ability to explain cybersecurity risks to technical and non-technical stakeholders.
- Strong attention to detail, confidentiality, and professional ethics.
- Authorization to work in the United States.
Preferred Qualifications
- Experience with AWS, Microsoft Azure, Microsoft 365, Entra ID, Defender, or Google Cloud.
- Familiarity with OWASP Top 10, MITRE ATT&CK, NIST CSF, CIS Benchmarks, and ISO 27001.
- Previous experience with a cybersecurity consulting company, MSSP, SOC, or penetration testing team.
- Certifications such as Security+, CySA+, CEH, GSEC, AWS Certified Security, or Microsoft Security Operations Analyst.
- Scripting experience with Python, PowerShell, or Bash.
- Experience preparing client-facing security assessment and incident response reports.
Why Join PlutoSec?
- Join a leading multinational cybersecurity company with operations across the United States, Canada, and the United Kingdom.
- Work on real-world cybersecurity projects across multiple industries.
- Gain exposure to penetration testing, cloud security, incident response, managed security, and compliance engagements.
- Collaborate with experienced cybersecurity consultants, penetration testers, red teamers, and cloud professionals.
- Receive professional development and certification support.
- Work in a flexible, collaborative, and growth-focused environment.
- Access career advancement opportunities as PlutoSec expands across the United States.
How to Apply
Please submit your resume along with a short introduction describing your cybersecurity experience, technical strengths, certifications, and the types of security projects you have worked on.
PlutoSec is an equal-opportunity employer. Employment decisions are based on qualifications, experience, performance, and business requirements without discrimination based on any legally protected characteristic.
Skills Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
- Two or more years of experience in cybersecurity, security operations, vulnerability management, or information security.
- Strong understanding of networking, Windows, Linux, Active Directory, cloud infrastructure, and common cyberattack techniques.
- Experience with SIEM, vulnerability scanning, endpoint security, and network analysis tools.
- Familiarity with Wazuh, Microsoft Sentinel, Splunk, Nessus, Qualys, Nmap, Wireshark, and Burp Suite.
- Knowledge of incident response, vulnerability management, threat detection, and security hardening.
- Strong written and verbal communication skills.
- Ability to explain cybersecurity risks to technical and non-technical stakeholders.
- Strong attention to detail, confidentiality, and professional ethics.
- Authorization to work in the United States.
- Experience with AWS, Microsoft Azure, Microsoft 365, Entra ID, Defender, or Google Cloud.
- Familiarity with OWASP Top 10, MITRE ATT&CK, NIST CSF, CIS Benchmarks, and ISO 27001.
- Previous experience with a cybersecurity consulting company, MSSP, SOC, or penetration testing team.
- Certifications such as Security+, CySA+, CEH, GSEC, AWS Certified Security, or Microsoft Security Operations Analyst.
- Scripting experience with Python, PowerShell, or Bash.
- Experience preparing client-facing security assessment and incident response reports.
What We Do
PlutoSec is a leading cybersecurity and penetration testing company providing comprehensive security services to businesses across Canada, the United States, and globally. We help organizations identify, validate, and remediate security vulnerabilities before attackers can exploit them. Our services include web application penetration testing, API security testing, mobile application penetration testing (iOS & Android), external and internal network penetration testing, cloud security assessments for Microsoft Azure, AWS, and Google Cloud, Active Directory security assessments, Microsoft 365 security reviews, vulnerability assessments, red team engagements, malware analysis, digital forensics, incident response, ransomware recovery, managed security services (MSSP), and continuous security monitoring. Beyond offensive security, PlutoSec assists organizations in achieving compliance with SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, PHIPA, NIST, and CIS Controls through security assessments, compliance consulting, gap assessments, policy development, and remediation guidance. Unlike organizations that rely primarily on automated vulnerability scanners, PlutoSec combines advanced security tools with extensive manual penetration testing performed by certified cybersecurity experts. This human-led approach uncovers complex business logic flaws, authentication weaknesses, privilege escalation paths, API vulnerabilities, cloud misconfigurations, and other critical security risks that automated scanners often fail to detect. From startups and healthcare providers to financial institutions, SaaS companies, government organizations, and enterprises, PlutoSec delivers practical, risk-based recommendations that strengthen security, reduce cyber risk, and help organizations build resilient, compliant environments.
Why Work With Us
At PlutoSec, you'll work alongside experienced cybersecurity professionals on penetration testing, cloud security, malware analysis, and compliance projects. We foster continuous learning, innovation, and career growth while helping organizations stay secure against evolving cyber threats.
Gallery
