Cybersecurity Analyst

Seeking an experienced Cyber Security Analyst III to lead cybersecurity operations, manage Microsoft security technologies, and strengthen the organization’s security posture. The role focuses on threat detection, incident response, governance, compliance, and Microsoft security administration., * Lead cybersecurity initiatives and support security strategy.

• Manage Microsoft Defender, Sentinel, Purview, and Entra ID (Azure AD).
• Perform threat hunting, incident response, and monthly attack simulations.
• Develop security playbooks and automate response processes.
• Conduct vulnerability assessments and risk remediation.
• Ensure compliance with NIST, GDPR, LGPD, DORA, and other security standards.

Join our dynamic cybersecurity team as a Cybersecurity Analyst and become a vital defender of our digital assets and infrastructure. In this role, you will be at the forefront of safeguarding our IT environment by analyzing security systems, identifying vulnerabilities, and implementing robust security measures. Your expertise will help ensure compliance with industry standards such as ISO 27001 and NIST, while supporting the organization’s mission to maintain a secure and resilient technology landscape. This position offers an exciting opportunity to apply your technical skills in a fast-paced, innovative environment committed to excellence in information security.

Responsibilities

• Monitor and analyze security events using Security Information and Event Management (SIEM) tools to detect potential threats and incidents.
• Conduct vulnerability assessments and security risk investigations across network infrastructure, including LAN, WAN, and cloud environments like AWS and Google Cloud Platform.
• Manage and configure firewalls such as Cisco ASA, Cisco ISE, and other cybersecurity tools to enforce network security policies.
• Perform incident response activities, including threat detection, containment, investigation, and recovery following established protocols aligned with FISMA, FedRAMP, or other compliance frameworks.
• Support system hardening efforts on operating systems like Windows, Linux (Debian, CentOS), macOS, and openSUSE to reduce attack surfaces.
• Assist in the development and maintenance of system security plans (SSPs) and participate in security assessments based on ISO 27000 standards.
• Collaborate with IT teams on network engineering projects involving routing protocols (OSPF, BGP), network architecture design, load balancing, VPNs, IPsec configurations, and network support activities.

• Proven experience working with computer networking concepts including LAN/WAN architectures, TCP/IP protocols, DNS, DHCP, and network support functions.
• Hands-on knowledge of cybersecurity tools such as IDS/IPS systems, endpoint detection & response (EDR), threat intelligence platforms, Splunk or SolarWinds for log analysis and event management.
• Familiarity with security frameworks like NIST standards (including RMF), COBIT governance practices, PCI DSS compliance requirements, and FIPS standards for encryption.
• Strong understanding of security engineering principles including system hardening techniques for various operating systems (Windows Server, Linux distributions like Ubuntu or openSUSE).
• Experience conducting vulnerability research and assessments using tools like Nessus or open-source alternatives; performing security risk assessments based on industry best practices.
• Knowledge of cloud security architecture within PaaS/IaaS environments such as AWS or Azure; experience with cloud infrastructure security controls is a plus.
• Ability to script or automate tasks using Python or Bash shell scripting for incident management or vulnerability research purposes.

Pay: Up to $53.00 per hour