Analyst - IT Security
CIRCULAR ACTION ALLIANCE
United States
26 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
1 year minimum
Compensation
$83,000 - $98,000
Working hours
Regular working hours
Job source
Tech stack
Microsoft Windows
Microsoft Azure
Software as a Service
Cloud Computing
Cyber Security
Domain Name System (DNS)
Multi-Factor Authentication
Web Servers
Information Technology Operations
Intrusion Detection and Prevention
Intrusion Detection Systems
Role-Based Access Control
+9 more
Azure Active Directory
Cloud Services
Anti-Phishing
Security Information and Event Management
Cloud Platform System
Firewalls (Computer Science)
Information Technology
Cloudflare
Microsoft Sentinel
Job description
- Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations.
- Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures.
- Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
- Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions.
- Assist with managing Cloudflare security, including reviewing DNS and bot protection events.
- Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices.
- Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization.
- Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff.
- Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts.
- Assist in documenting security procedures, checklists, and βhow-toβ guides designed for non-technical staff and volunteers.
- Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organizationβs needs.
- Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities.
- Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise.
- Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring.
- Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes.
- Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders.
- Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response.
- Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities.
- Other job-related duties as assigned., * Pay Rate: Based on a variety of factors in accordance with applicable law including the successful candidateβs relevant experience, skills, knowledge, and experience.
- Reports To: IT Operations/Security Architect
Requirements
- Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege.
- Knowledge of Microsoft 365 and fundamental cloud concepts.
- Strong communication skills and patience when working with non-technical staff in a mission-driven environment.
- Proven reliability, confidentiality, and integrity in managing sensitive information., * Associateβs or bachelorβs degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps.
- 1-2 years experience in IT, Cybersecurity or other related roles.
- Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦