Cybersecurity Analyst

ComTec is looking for a Cybersecurity Analyst to lead threat detection, investigation, and response activities within a SOC environment. The role focuses on analyzing alerts from SIEM and firewalls, reviewing logs, conducting investigations, and communicating findings. It involves threat intelligence, forensic investigations, and email phishing detection to protect critical IT infrastructure., * Investigate security alerts, logs, and incidents related to malware, phishing, and unauthorized access.

• Conduct investigations by reviewing logs and alerts to identify root causes.
• Support threat hunting activities by analyzing alerts from SIEM and firewalls.
• Gather and analyze threat intelligence to stay ahead of adversaries.
• Assist in the creation of detection rules and playbooks based on alert analysis.
• Use the MITRE ATT&CK framework to interpret alerts and threat activity.
• Assist in developing detection automation using SOAR.
• Participate in attack simulations and tabletop exercises to improve SOC readiness.
• Prepare incident reports and post-incident reviews to document findings.
• Stay current on emerging threats and AI/Agentic AI applications in cybersecurity.
• Lead lessons learned sessions after incidents.
• Participate in on-call rotation every 4-6 weeks.
• Be willing to travel up to 25% for training and incident support.

• 1+ years of basic cybersecurity knowledge/experience in key areas such as Asset Management, Threat and Vulnerability Management, and Incident Response.
• Familiarity with SIEM, SOAR, IDS/IPS, and forensic tools.
• Familiarity with security monitoring tools like SIEMs, Splunk, CrowdStrike, and other threat detection platforms.
• Understanding of adversary tactics using the MITRE ATT&CK framework.
• Experience with email security tools and phishing detection.
• Ability to analyze advanced cyber threats and support investigations.
• Familiarity with regulations like SOX and NERC CIP and experience supporting audits or assessments.
• Ability to perform data analysis, integration, and validation activities related to security operations.
• Basic knowledge of cloud, ICS, OT, and network security principles.
• Understanding of AI and Agentic AI tools used in cybersecurity.
• Collaborative team player with strong analytical and communication skills.
• Self-motivated, resourceful, and customer-focused with a strong sense of ownership.
• Certifications such as CompTIA, GIAC, ISC2 are a plus.

Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 8 hrs every other Saturday)

Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 8 hrs every other Saturday)

Shift 3 (Dight): 6:00 PM to 6:00 AM (7 days On - 7 days Off) [One week 7 consecutive days including weekends, Next complete week off]

Onsite:

• Day Shift resources need to go onsite 2 days a week
• Night shift resources don’t need to go onsite