> Markdown version of [/jobs/ext/3051138-security-analyst-ii](https://www.wearedevelopers.com/jobs/ext/3051138-security-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst II - **Company:** PROFESSIONAL SEARCH INC - **Location:** Cleveland, OH, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Backup Devices, Business Systems, Command-Line Interface, Cyber Security, Computer Networks, Linux, IP Addressing, Subnetting, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Diagrams, Routing, Windows PowerShell, Phishing, Security Information and Event Management, Syslog, Virtual Local Area Networks, Zabbix, Scripting, Computer Networking Systems, Okta, Falcon Platform, Palo Alto Networks, Wireless Technologies, Virtual Agents, Security Orchestration, Automation & Response - **Published:** September 24, 2026 - **Apply:** https://www.wayup.com/i-j-Security-Analyst-II-Professional-Search-Group-Inc-836712977445515/ ## About the Role + Two to four years of hands-on experience in security operations, IT security, or a closely related role. + Working knowledge of IP addressing, subnets, routing, VLANs, and how firewalls and VPNs fit into an enterprise network. + Hands-on experience investigating security alerts and reading logs from email, identity, endpoint, or firewall systems. + Familiarity with SIEM and EDR concepts and with the phases of incident response. + Ability to run first-line investigation and response with limited supervision. + Strong written communication for incident documentation and reporting. + Ability to use AI tools such as Claude for analysis, research, and documentation. Preferred (Not Required) + Direct experience with Proofpoint, Okta, Microsoft 365 security, CrowdStrike, or Palo Alto Networks. + Scripting with Python or PowerShell. + Exposure to SOAR or other security automation. + Linux and command-line familiarity. + Security certifications such as Security+, CySA+, or equivalent. ## Description Our client is strengthening its security operations as its network and business systems grow across multiple states. They are seeking an experienced Security Analyst II to investigate and respond to security events across email, identity, endpoint, and network systems. This role works directly under the Senior Network Security Engineer. The person is expected to handle first-line investigation and response independently, help close configuration and detection gaps, and cover security operations when the senior engineer is unavailable. It suits someone with a few years of hands-on security experience who is ready to own daily security operations and grow into a senior role., Security Monitoring & Incident Response + Investigate security alerts across email security, identity, endpoint, firewall, VPN, and wireless systems. + Run first-line incident response, including initial scoping, evidence gathering, and containment under established runbooks. + Triage user-reported phishing through the Proofpoint reporting workflow and reply to the reporters. + Escalate confirmed incidents with clear, documented findings. Detection & Hardening + Help build, tune, and maintain detection rules and alert notification policies so that valid detections reach the team. + Assist with security configuration reviews and close identified gaps in email, identity, and endpoint controls. + Help maintain and extend the CrowdStrike Fusion SOAR triage automation. + Track hardening tasks through to completion and keep their status visible. Network & Infrastructure Support + Assist with firewall rule reviews, change preparation, and documentation. + Support VPN operations and access-related tasks. + Maintain network diagrams, inventory, and monitoring. + Assist with configuration backups, health checks, and routine maintenance Process & Documentation + Maintain runbooks, SOPs, and troubleshooting guides. + Document incidents, investigations, and changes accurately for later reference and reporting. + Use approved AI tooling to speed analysis, drafting, and research. Tools & Systems The person in this role will work with: + Proofpoint email security (TAP, TRAP, reporting workflow) + Microsoft 365, Entra ID, and Okta for identity and access + CrowdStrike Falcon (NG-SIEM, EDR, Fusion SOAR) + Palo Alto firewalls and GlobalProtect VPN + Arista switches and Ruckus wireless + Zabbix monitoring, syslog, and Oxidized configuration backups + An AI assistant such as Claude for analysis, documentation, and workflow automation ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)