> Markdown version of [/jobs/ext/4335682-analyst-it-security](https://www.wearedevelopers.com/jobs/ext/4335682-analyst-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Analyst - IT Security

- **Company:** CIRCULAR ACTION ALLIANCE
- **Location:** United States (Remote available)
- **Experience:** Starter
- **Salary:** $83,000 - $98,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Domain Name System (DNS), Multi-Factor Authentication, Web Servers, Information Technology Operations, Intrusion Detection and Prevention, Intrusion Detection Systems, Role-Based Access Control, Azure Active Directory, Cloud Services, Anti-Phishing, Security Information and Event Management, Cloud Platform System, Firewalls (Computer Science), Information Technology, Cloudflare, Microsoft Sentinel
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3ec03447e42d927c

## About the Role

* Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege.
 * Knowledge of Microsoft 365 and fundamental cloud concepts.
 * Strong communication skills and patience when working with non-technical staff in a mission-driven environment.
 * Proven reliability, confidentiality, and integrity in managing sensitive information., * Associate's or bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps.
 * 1-2 years experience in IT, Cybersecurity or other related roles.
 * Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.

## Description

* Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations.
 * Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures.
 * Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
 * Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions.
 * Assist with managing Cloudflare security, including reviewing DNS and bot protection events.
 * Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices.
 * Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization.
 * Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff.
 * Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts.
 * Assist in documenting security procedures, checklists, and "how-to" guides designed for non-technical staff and volunteers.
 * Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization's needs.
 * Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities.
 * Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise.
 * Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring.
 * Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes.
 * Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders.
 * Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response.
 * Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities.
 * Other job-related duties as assigned., * Pay Rate: Based on a variety of factors in accordance with applicable law including the successful candidate's relevant experience, skills, knowledge, and experience.
 * Reports To: IT Operations/Security Architect