> Markdown version of [/jobs/ext/2653632-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/2653632-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst

- **Company:** Bruker
- **Location:** Billerica, MA, United States
- **Experience:** Experienced
- **Salary:** $65,250.0 - $116,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, CompTIA Security+, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Phishing, Kusto Query Language, Security Information and Event Management, Scripting, Mitre Att&ck, Malware, Information Technology, Cybercrime, Microsoft Sentinel, Security Orchestration, Automation & Response
- **Published:** August 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c3cbbcf2f8bc77a3

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
 * 3-5 years of cybersecurity, SOC, incident response, or threat detection experience.
 * Hands-on experience with:
 + Microsoft Defender XDR
 + Microsoft Sentinel
 + Kusto Query Language (KQL)
 + SIEM technologies
 + Incident Response processes
 + Threat Hunting methodologies
 * Knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
 * Experience investigating endpoint, identity, email, and cloud-based threats.
 * Strong analytical and problem-solving skills.
 * Excellent written and verbal communication skills., * Experience securing Microsoft Azure environments.
 * Knowledge of scripting or automation technologies (PowerShell, Python).
 * Familiarity with SOAR solutions and security automation.
 * Experience with digital forensics and malware analysis.

Preferred Certifications

 * Microsoft Certified: Security Operations Analyst Associate (SC-200)
 * Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 * CompTIA Security+
 * CompTIA CySA+
 * GIAC Certified Incident Handler (GCIH) or equivalent certifications.

What Success Looks Like

 * Effective identification and response to cybersecurity incidents.
 * Continuous improvement of detection and monitoring capabilities.
 * Reduction of response times through automation and process optimization.
 * Strong collaboration with global security and IT teams.
 * Contribution to Bruker's overall cyber resilience strategy.

## Description

* Monitor and analyze security alerts generated from Microsoft Defender XDR, Microsoft Sentinel, and other security platforms.
 * Investigate security incidents and coordinate containment, eradication, and recovery activities.
 * Conduct threat hunting activities using MITRE ATT&CK methodologies and threat intelligence sources.
 * Analyze endpoint, identity, cloud, email, and network telemetry to identify malicious activity.
 * Perform phishing investigations and support user awareness initiatives.
 * Develop and improve detection rules, analytics, and SOC monitoring use cases.
 * Support digital forensic investigations and root cause analysis efforts.
 * Collaborate with IT infrastructure, cloud, networking, and compliance teams during incident response activities.
 * Contribute to SIEM tuning, automation, and continuous SOC process improvements.
 * Create and maintain incident reports, operational metrics, and executive summaries.
 * Participate in on-call and major incident response activities as required.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)