Cyber Security Analyst

The Cyber Security Analyst is responsible for protecting the organization’s information assets through proactive monitoring, threat detection, incident response, vulnerability management, and operational security activities. The role supports the IT Cyber Security Manager in executing the organization’s cybersecurity strategy and maintaining a secure technology environment.

The Cyber Security Analyst serves as a trusted advisor by balancing cybersecurity risk with business objectives and helping ensure the organization’s security program aligns with industry frameworks including the NIST Cybersecurity Framework (CSF 2.0), CIS Critical Security Controls, and Microsoft Security Best Practices.

The Cyber Security Analyst is expected to exercise sound judgment, communicate effectively with technical and non-technical stakeholders, and escalate risks and significant security events to the IT Cyber Security Manager when appropriate., Security Operations

• Monitor and investigate security events across endpoint, identity, email, cloud, and network security platforms.
• Analyze alerts and coordinate response actions.
• Assist with incident response, documentation, and threat hunting.

Vulnerability & Risk Management

• Prioritize vulnerabilities based on business risk.
• Coordinate remediation and validate corrective actions.
• Assist with penetration testing and remediation tracking.

Identity, Cloud & Endpoint Security

• Monitor Entra ID, endpoint security, Microsoft 365, and privileged access.
• Review application permissions and service principals.

AI Security & Governance

• Support secure AI adoption.
• Monitor for Shadow AI.
• Evaluate AI solutions for security and privacy risks.

Security Engineering & Administration

• Administer and tune cybersecurity technologies.
• Develop security automation using PowerShell or Microsoft Graph.

Governance, Risk & Compliance

• Support NIST CSF 2.0, CIS Controls, audits, documentation, and risk assessments.

Security Awareness & Collaboration

• Support awareness training.
• Collaborate across IT and business teams.
• Stay current on emerging threats.

Required

• Bachelor’s degree or equivalent experience.
• 3-5 years of cybersecurity or security-focused systems administration experience.
• Strong analytical and communication skills.
• Working knowledge of Windows Server, Active Directory, networking, and Microsoft 365.

Preferred Experience

• Microsoft Defender suite, Entra ID, Purview, Sentinel, Intune
• CrowdStrike, Fortinet, Endpoint Central
• Azure, PowerShell, Microsoft Graph API

Preferred Certifications

• Security+
• CySA+
• SC-200
• SC-300
• AZ-500
• CISSP (or pursuing)