Cybersecurity Analyst

• Incident Detection and Response - Monitor and analyze alerts generated by SIEM/SOAR platforms and user reports, investigate security incidents, and execute containment and eradication procedures to minimize impact and restore normal operations.
• Tuning & Optimization - Continuously refine detection rules and SOC processes to reduce false positives, enhance detection accuracy, and improve overall operational efficiency.
• Research & Development - Explore emerging threats and attack techniques to develop and implement new detection rules to expand visibility and strengthen the organization’s security posture.
• Threat Hunting - Proactively hunt for hidden threats by analyzing logs and identifying gaps missed by existing security tools and improve security posture.
• Threat Intelligence - Review threat intelligence feeds, channels and articles to identify potential risks and proactively strengthen defenses.
• Automation Development - Design, implement, and maintain automation solutions to streamline SOC workflows, reduce manual effort, and accelerate incident response times.
• Reporting - Prepare and present comprehensive reports on key SOC activities, metrics, and security trends to stakeholders and management.
• Penetration Testing Exercises - Participate in Red and Purple Team exercises to assess and improve the effectiveness of security controls and incident response capabilities.

• Hands-on experience working with SIEM platforms
• Familiarity with EDR solutions like CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Cortex XDR.
• Understanding and familiarity with interpreting common log sources for monitoring and investigation (e.g. Firewall, Azure AD, Windows Security Log, Email, Proxy\URL Filtering etc.)
• Solid grasp of prevalent attack types, including phishing, brute-force attacks, malware, and data exfiltration techniques.
• Demonstrated proactive mindset, strong sense of responsibility, and urgency in addressing security incidents and tasks.
• Strong motivation and willingness to continually learn and grow, adapting to new tools and evolving threat landscapes.
• Minimum of 1-2 years of experience working in a Security Operations Center (SOC) environment, either in-house or with a Managed Security Service Provider (MSSP).
• Bachelor’s degree in Computer Security, Cybersecurity, Information Security, or a related field preferred. Additional relevant experience may be considered in lieu of a degree.
• Preferred: Experience with advanced SIEM content development, including custom correlation rules, dashboards, and reporting.
• Preferred: Proficiency in scripting languages such as Python, PowerShell, or Bash for automating security tasks and processes.
• Preferred: Direct involvement in end-to-end incident response, including root cause determination and post-incident reporting.
• Preferred: Experience monitoring and securing cloud environments (e.g., Microsoft Azure, AWS, Google Cloud Platform).
• Analytical and problem-solving skills
• Strong troubleshooting and log analysis capabilities
• Ability to translate security requirements into technical solutions
• Ability to work both independently and collaboratively in a fast-paced SOC environment
• Excellent verbal and written communication skills, with the ability to collaborate effectively with team members both within and outside the SOC.
• High level of situational awareness and problem sensitivity, with the ability to proactively identify issues and escalate concerns as appropriate.
• Ability to work independently, manage multiple priorities, and succeed in a fast-paced, dynamic environment.

Travel up to 5 days per year

Estimated annual base salary range for this position is 100-130k/year.

Base pay is only part of our total compensation package, which also includes an attractive annual discretionary bonus and robust suite of employee benefits for which you are eligible to participate in starting on your first day of employment.

Base pay offered will be determined on an individualized basis and we will consider your location, experience, and other job-related factors.

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

• Competitive base salary and bonus opportunities
• Paid time off (three-week minimum)
• Medical, dental and vision starting day one
• 401(k) with employer match
• Paid parental leave
• Child and family care assistance (dependent care FSA with employer match up to $2500)
• Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
• Tuition assistance
• Wellness program with savings of up to $4,000 per year on insurance premiums
• …and more!