> Markdown version of [/jobs/ext/1280588-l1-security-analyst-onsite](https://www.wearedevelopers.com/jobs/ext/1280588-l1-security-analyst-onsite). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# L1: Security Analyst (onsite)

- **Company:** Lumifi Cyber, Inc.
- **Location:** Scottsdale, AZ, United States
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** JIRA, Microsoft Azure, Cyber Security, Issue Tracking Systems, Packet Analyzer, RSA (Cryptosystem), Security Information and Event Management, TCP/IP, ArcSight Event Correlation, Splunk, Servicenow
- **Published:** July 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ec8d3c6635b0188a

## About the Role

* Ability to analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks
 * Possesses a understanding of the TCP/IP protocol suite, security architecture, and common TTP's (tactics, techniques, and procedures) used by threat actors
 * Knowledge of analyzing both log and packet data in a SIEM (RSA NetWitness, Azure Sentinel, Splunk, etc.)
 * Understanding of incident response methodologies and reporting
 * Experience using ticketing systems for tracking (JIRA, Remedy, ServiceNow, etc.)
 * Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents, and interact with customers, * Minimum of one to two years of experience performing triage/incident response in enterprise environments
 * Minimum of one to two years of experience performing forensic analysis of logs and packet captures to identify malicious artifacts
 * Higher level security certifications (CEH, GCIH, GCFA, GCFE, GCTI, GCIA, GREM, GPEN, GFNA, OCSP) preferred
 * Strong research background and an analytical approach, especially with respect to event classification, event correlation, and root cause analysis
 * Ability to follow through with projects to completion both individually and in a group

## Description

* Triage alerts and determine if further investigation or action is required by the customer
 * Assist customers with the investigation and response of incidents throughout the incident response process
 * Perform investigations of customer requests and be able to provide further contextual information along with recommended actions
 * Proactively threat hunt using network and host data within customer environments


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)