> Markdown version of [/jobs/ext/4249453-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/4249453-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst

- **Company:** First Quality Enterprises, LLC
- **Location:** United States (Remote available)
- **Experience:** Starter
- **Salary:** $100,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, ARM Architecture, Automation of Tests, Microsoft Azure, Bash Shell, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Windows PowerShell, Azure Active Directory, Anti-Phishing, Security Information and Event Management, Scripting, Google Cloud, Cloud Platform System, Cyber Threat Analysis, Firewalls (Computer Science), Azure Security Center, Falcon Platform, Cybercrime, Windows Security, Purple Team (Cyber Security), SentinelOne Expertise
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=72411a6afeadc308

## About the Role

* Hands-on experience working with SIEM platforms
 * Familiarity with EDR solutions like CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Cortex XDR.
 * Understanding and familiarity with interpreting common log sources for monitoring and investigation (e.g. Firewall, Azure AD, Windows Security Log, Email, Proxy\URL Filtering etc.)
 * Solid grasp of prevalent attack types, including phishing, brute-force attacks, malware, and data exfiltration techniques.
 * Demonstrated proactive mindset, strong sense of responsibility, and urgency in addressing security incidents and tasks.
 * Strong motivation and willingness to continually learn and grow, adapting to new tools and evolving threat landscapes.
 * Minimum of 1-2 years of experience working in a Security Operations Center (SOC) environment, either in-house or with a Managed Security Service Provider (MSSP).
 * Bachelor's degree in Computer Security, Cybersecurity, Information Security, or a related field preferred. Additional relevant experience may be considered in lieu of a degree.
 * Preferred: Experience with advanced SIEM content development, including custom correlation rules, dashboards, and reporting.
 * Preferred: Proficiency in scripting languages such as Python, PowerShell, or Bash for automating security tasks and processes.
 * Preferred: Direct involvement in end-to-end incident response, including root cause determination and post-incident reporting.
 * Preferred: Experience monitoring and securing cloud environments (e.g., Microsoft Azure, AWS, Google Cloud Platform).
 * Analytical and problem-solving skills
 * Strong troubleshooting and log analysis capabilities
 * Ability to translate security requirements into technical solutions
 * Ability to work both independently and collaboratively in a fast-paced SOC environment
 * Excellent verbal and written communication skills, with the ability to collaborate effectively with team members both within and outside the SOC.
 * High level of situational awareness and problem sensitivity, with the ability to proactively identify issues and escalate concerns as appropriate.
 * Ability to work independently, manage multiple priorities, and succeed in a fast-paced, dynamic environment.

Travel up to 5 days per year

## Description

* Incident Detection and Response - Monitor and analyze alerts generated by SIEM/SOAR platforms and user reports, investigate security incidents, and execute containment and eradication procedures to minimize impact and restore normal operations.
 * Tuning & Optimization - Continuously refine detection rules and SOC processes to reduce false positives, enhance detection accuracy, and improve overall operational efficiency.
 * Research & Development - Explore emerging threats and attack techniques to develop and implement new detection rules to expand visibility and strengthen the organization's security posture.
 * Threat Hunting - Proactively hunt for hidden threats by analyzing logs and identifying gaps missed by existing security tools and improve security posture.
 * Threat Intelligence - Review threat intelligence feeds, channels and articles to identify potential risks and proactively strengthen defenses.
 * Automation Development - Design, implement, and maintain automation solutions to streamline SOC workflows, reduce manual effort, and accelerate incident response times.
 * Reporting - Prepare and present comprehensive reports on key SOC activities, metrics, and security trends to stakeholders and management.
 * Penetration Testing Exercises - Participate in Red and Purple Team exercises to assess and improve the effectiveness of security controls and incident response capabilities.