> Markdown version of [/jobs/ext/2864235-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/2864235-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Analyst - **Company:** Wrench Inc. - **Location:** Sarasota, FL, United States - **Experience:** Starter - **Salary:** $80,000.0 - $90,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Cyber Security, Query Languages, Identity and Access Management, Information Technology Operations, Intrusion Detection and Prevention, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Azure Active Directory, Phishing, Kusto Query Language, Security Log, Security Information and Event Management, Software Vulnerability Management, Microsoft InTune, Information Technology - **Published:** September 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=58b7fd2e1ea5addb ## About the Role Do I Have What it Takes? We're looking for someone who is curious, analytical, detail-oriented, and eager to grow. You'll ideally have: * 1-3 years of experience in cybersecurity, SOC operations, IT support, or another related technical role. * A bachelor's degree or equivalent experience in Cybersecurity, Information Technology, or a related field. * Working knowledge of cybersecurity fundamentals, including phishing, endpoint protection, networking, and identity security. * Hands-on exposure to security tools such as SIEM, endpoint protection, vulnerability management, or email security. * Strong analytical and problem-solving skills. * The ability to investigate issues independently while recognizing when escalation is needed. * Strong communication, documentation, and organizational skills. * A collaborative approach and willingness to learn. Even Better If You Have * Security+, Network+, SC-900, AZ-900, or similar certifications. * Experience with Microsoft Defender, Rapid7, Microsoft Entra ID, or Microsoft Intune. * Exposure to incident response or cybersecurity frameworks. * Familiarity with KQL, LEQL, SPL, or other security log-query languages. * Basic PowerShell, Python, or automation experience. * Experience investigating Microsoft security alerts, Entra sign-in logs, audit logs, or identity-related security incidents. ## Description Wrench Group is looking for a Cybersecurity Analyst to join our Cybersecurity, Privacy & Governance team. This is a great opportunity for someone with foundational cybersecurity or IT operations experience who is ready to move beyond the basics, gain hands-on experience with enterprise security tools, and continue developing into a well-rounded cybersecurity professional. You'll be part of our Cyber Fusion Center, helping monitor and investigate security activity, respond to threats, strengthen our security controls, and protect a growing organization. This isn't a role where you'll simply watch alerts all day. You'll have opportunities to investigate, problem-solve, work with modern security technologies, and build deeper expertise in incident response, detection engineering, identity security, and security tooling. Please note: We are interested in every qualified candidate who is eligible to work in the United States. However, we are not able to sponsor visas needed now or in the future., * Review, triage, and investigate security alerts from SIEM and detection platforms. * Respond to routine and moderate-complexity security events and know when to escalate more advanced incidents. * Provide Tier 1/Tier 2 SOC support and partner with senior analysts and IT Operations on complex investigations. * Investigate suspicious or quarantined email activity and take appropriate action. * Document findings, actions, and remediation steps., * Help administer and tune tools such as Microsoft Defender, Rapid7, and SIEM platforms. * Support the development and improvement of detection rules, alerts, and playbooks. * Monitor security telemetry and data flowing into SIEM platforms. * Help improve detection processes, reduce false positives, and strengthen response times. Protect Identity & Data * Support identity and access management, including access reviews and account administration. * Work with technologies including Microsoft Entra ID, Microsoft 365, and Intune. * Assist with identity security controls and data preservation activities. Collaborate & Keep Learning * Work across Cybersecurity, IT, managed security services, and business teams. * Help turn security findings into clear, actionable information. * Stay current on emerging threats, vulnerabilities, and cybersecurity best practices. * Continue building your expertise across incident response, detection engineering, and security operations. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Building Security Champions](https://www.wearedevelopers.com/videos/193-building-security-champions) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)