Cybersecurity Analyst

NetFire is seeking a motivated, detail-oriented Cybersecurity Analyst to join our growing information security team. This is an excellent opportunity for someone at the start of their career who is passionate about protecting systems, networks, and data. You will work alongside experienced security professionals, gain hands-on exposure to real-world threats, and build the foundation for a long-term career in cybersecurity.

We believe in investing in our people. You do not need years of experience, you need curiosity, drive, and a genuine interest in keeping systems secure.

What you will do:

• Assist in developing, implementing, and maintaining security policies, procedures, and standards in alignment with industry frameworks and regulatory requirements (e.g., NIST, CIS Controls, PCI DSS, HIPAA).
• Monitor security events, investigate alerts, and respond to incidents. Working to identify threats, assess risks, and contain issues before they escalate.
• Perform regular vulnerability assessments and support penetration testing activities to surface weaknesses across systems and network infrastructure.
• Participate in the administration and tuning of security tools including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection platforms, and vulnerability scanners.
• Support internal and external stakeholders with security-related inquiries, incidents, and compliance questions.
• Contribute to security awareness efforts and help document lessons learned from security events.
• Stay current on emerging threats, CVEs, and evolving best practices - and bring that knowledge back to the team.

Technical Knowledge:

• Solid understanding of computer networking concepts, protocols (TCP/IP, DNS, HTTP/S, etc.), and network security methodologies.
• Familiarity with core security principles: confidentiality, integrity, availability, non-repudiation, and authentication.
• Working knowledge of risk management concepts, threat modeling, and vulnerability assessment processes.
• Exposure to security tooling such as firewalls, IDS/IPS, endpoint protection, and vulnerability scanners.
• Understanding of regulatory frameworks including PCI DSS and HIPAA is a plus.

Operating Systems:

• Windows 11
• Windows Server
• macOS / iOS / iPadOS
• Linux; Debian-based and/or RHEL-based distributions

Software & Collaboration Ecosystems:

• Microsoft 365 (Exchange, Teams, SharePoint, Defender)
• Google Workspace
• Microsoft Azure Active Directory / Entra ID
• Microsoft Active Directory

Skills:

• Strong analytical mindset with a curiosity-first approach to problem-solving.
• Clear written and verbal communication, able to explain security concepts to non-technical audiences.
• Organized and detail-oriented; comfortable managing multiple tasks and priorities.
• A team player who also takes initiative and works well independently.

Education:

• Bachelor’s or Associate’s degree in Computer Science, Information Technology, Cybersecurity, or a related field required.
• High school diploma or GED required for candidates without a degree.
• Technical certifications and demonstrated self-directed learning (home labs, online courses, CTF competitions, etc.) are welcomed and may substitute for formal education in exceptional cases.

Certifications (Preferred, Not Required):b

Any of the following certifications demonstrate a strong foundation and will stand out in your application:

• CompTIA: Security+, CySA+, PenTest+, CASP+
• ISC²: CC (Certified in Cybersecurity), SSCP, CISSP
• ISACA: CISM, CISA, CRISC, Analysis Skills, Authentication, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Communication Skills, CompTIA Security+, Computer Networks, Computer Science, Computer Security, DNS (Domain Name System), Debian Linux, Detail Oriented, Ecosystems, Endpoint Security, Firewalls, HIPAA (Health Insurance Portability and Accountability Act), HTTP (HyperText Transport Protocol), High School Diploma, ISACA (Information Systems Audit and Control Association), Incident Response, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Intrusion Detection Systems, Intrusion Detection and Prevention (IDP), Intrusion Prevention Systems, Linux Operating System, Mac Operating System, Machine Tool, Microsoft Active Directory, Microsoft Exchange Server, Microsoft SharePoint, Microsoft Windows Azure, Microsoft Windows Operating System, Microsoft Windows Server, Multitasking, Network Administration/Management, Network Protocols, Network Security, Online Courses, Operating Systems, Organizational Skills, PCI-DSS, Penetration Testing, Presentation/Verbal Skills, Problem Solving Skills, Red Hat Linux Operating System, Regulations, Regulatory Requirements, Risk Management, SSCP - Systems Security Certified Practitioner, Security Attacks, Security Information and Event Management (SIEM), Security Monitoring, TCP/IP (Transmission Control Protocol/Internet Protocol), Team Player, Threat Modeling, Threat and risk analysis (TRA), U.S. National Institute of Standards and Technology (NIST), Vulnerability Scanners, Writing Skills, iOS