> Markdown version of [/jobs/ext/1188422-cybersecurity-analyst-1](https://www.wearedevelopers.com/jobs/ext/1188422-cybersecurity-analyst-1). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Analyst 1 - **Company:** Barton Malow - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Programming, Identity and Access Management, Python (Programming Language), Network Protocols, Windows PowerShell, Server Administration, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Large Language Models, Mitre Att&ck, Cloudformation, Information Technology, Cybercrime, Cloudwatch - **Published:** July 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=565b285206e77b1f ## About the Role * Bachelor's degree in computer science, cybersecurity or related field or equivalent work experience. * 2-3 years of experience in security operations, vulnerability management, security engineering, incident response, or offensive security required. * Conceptual and technical knowledge of modern IT environments such as server configuration/architecture, cloud, database management/configuration, networking protocols/designs, and access management/access controls. * Working knowledge of AWS security fundamentals, including IAM (users, roles, policies, permission boundaries, and federation), the shared responsibility model, and core security services such as CloudTrail, GuardDuty, Security Hub, Config, and KMS. * Familiarity with cloud identity and access management concepts - least-privilege design, role assumption (STS), policy evaluation logic, and detecting over-permissioned or stale credentials. * Experience monitoring cloud environments for security events and correlating cloud logs with broader SIEM/MDR data sources is preferred. * Strong technical skills with knowledge of a wide variety of tools, and technologies, and experience deploying and monitoring these capabilities to identify cyber threats. * Knowledge of common cybersecurity frameworks and how to apply them, e.g., NIST 2.0 CSF, MITRE ATT&CK (including the ATT&CK Cloud matrix). * Demonstrated interpersonal skills and ability to work effectively and collaboratively with a wide range of stakeholders. * Demonstrated confidence and ease in delivering clear, effective verbal and written communication. * Experience in scripting and programming languages such as PowerShell, Bash, or Python is preferred. * Cybersecurity training or certifications from organizations such as CompTIA, TCM, SANS/GIAC, OffSec, ISC(2) is preferred; AWS certifications (e.g., AWS Certified Security - Specialty or Solutions Architect Associate) are a plus. "This position does not offer relocation assistance and is not eligible for visa sponsorship (e.g., H-1B). Applicants must be currently authorized to work in the United States on a permanent basis and reside within a reasonable commuting distance of [Southfield, Michigan location." ## Description The Cybersecurity Analyst is responsible for contributing to a variety of cybersecurity functions within the organization. This position is pivotal in maintaining and growing a proactive cybersecurity posture within the organization by promptly addressing security events, helping contribute to our cybersecurity roadmap, and ensuring that all stakeholders are well-informed about potential threats and preventive measures. The ideal candidate for this position is someone with a great technical foundation in cybersecurity, networking, and systems who is hungry to expand on their skills to contribute to an enterprise's overall cybersecurity program., * Investigate and respond to tickets generated by the organization's Managed Detection and Response (MDR) provider. * Actively engage in incident response and root cause analysis. Participate in incident response activities to analyze and remediate cyber threats. * Perform internal security audits to assess the organization's security posture, identify potential weaknesses, and recommend corrective measures. * Monitor and assess the security of cloud environments (AWS), including review of IAM policies, roles, and permissions to enforce least-privilege access and identify misconfigurations or privilege escalation paths. * Analyze cloud security telemetry - including AWS CloudTrail, GuardDuty, Security Hub, CloudFormation Guard and CloudWatch - to detect, investigate, and respond to suspicious activity and policy violations. * Educate and raise awareness among the user community about various security threats, best practices, and measures to mitigate risk. * Prioritize risk reduction and remediation tasks to support a vulnerability management program. * Develop and maintain technical procedures and playbooks focused on incident handling. * Communicate effectively with technical and non-technical teams while working to improve overall cybersecurity effectiveness. * Participate in tabletop exercises designed to simulate potential cybersecurity incidents. * Conduct research, analysis, and correlation of events across a wide variety of data sources. * Demonstrate the ability to effectively leverage AI and LLMs to drive value while proactively identifying and mitigating emerging risks. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [From Black Box to Glass Box : Bedrock AgentCore Observability](https://www.wearedevelopers.com/videos/2126-from-black-box-to-glass-box-bedrock-agentcore-observability) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)