Analyst - IT Security

CIRCULAR ACTION ALLIANCE
United States
26 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
1 year minimum
Compensation
$83,000 - $98,000
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Microsoft Azure Software as a Service Cloud Computing Cyber Security Domain Name System (DNS) Multi-Factor Authentication Web Servers Information Technology Operations Intrusion Detection and Prevention Intrusion Detection Systems Role-Based Access Control
+9 more
Azure Active Directory Cloud Services Anti-Phishing Security Information and Event Management Cloud Platform System Firewalls (Computer Science) Information Technology Cloudflare Microsoft Sentinel

Job description

  • Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations.
  • Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures.
  • Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
  • Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions.
  • Assist with managing Cloudflare security, including reviewing DNS and bot protection events.
  • Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices.
  • Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization.
  • Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff.
  • Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts.
  • Assist in documenting security procedures, checklists, and β€œhow-to” guides designed for non-technical staff and volunteers.
  • Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization’s needs.
  • Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities.
  • Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise.
  • Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring.
  • Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes.
  • Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders.
  • Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response.
  • Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities.
  • Other job-related duties as assigned., * Pay Rate: Based on a variety of factors in accordance with applicable law including the successful candidate’s relevant experience, skills, knowledge, and experience.
  • Reports To: IT Operations/Security Architect

Requirements

  • Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege.
  • Knowledge of Microsoft 365 and fundamental cloud concepts.
  • Strong communication skills and patience when working with non-technical staff in a mission-driven environment.
  • Proven reliability, confidentiality, and integrity in managing sensitive information., * Associate’s or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps.
  • 1-2 years experience in IT, Cybersecurity or other related roles.
  • Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Loading talks and stories from around this role…