Cybersecurity Analyst

The Cybersecurity Analyst (L2) owns escalated alerts and confirmed incidents that clear front-line triage, investigating and driving them to resolution., * Ownescalated alerts and confirmed incidents that clear front-line triage - investigate, scope impact, and drivethem to resolution.

• Serve as the escalation pointfor the L1 triage analysts, including phishing intake,providing guidance and quality control.
• Investigate across the full appliance stackEng maintains - EDR, SIEM,firewall, email security, and identity/access - correlating signal across tools rather than working alerts in isolation.
• Participate in coverage that spans business hours.
• Feedreal investigation findings back to Detection Engineering so tuningreflects what’’s actually happening on the floor, not just theoretical use-cases.
• Work alongside the Cybersecurity Engineer team to validate and refine agent-assisted alert triage.
• Document findings clearlyenough to support incident response, audit,and handoff to after-hours team.
• Work with the SOC Leadto create documented alert triage workflows.

• 2-4 years hands-on experience triaging, investigating, and escalating security alerts in a SOC or equivalent operations environment.
• Working fluency acrosscore security tooling - EDR, SIEM/log analysis, network/firewall traffic, email security, and identity systems.