> Markdown version of [/jobs/ext/4587821-cybersecurity-analyst-2nd-shift](https://www.wearedevelopers.com/jobs/ext/4587821-cybersecurity-analyst-2nd-shift). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst (2nd Shift)

- **Company:** Dot Security
- **Location:** Lake Forest, IL, United States
- **Experience:** Experienced
- **Salary:** $75,000.0 - $100,000.0
- **Contract:** Permanent contract
- **Skills:** Systems Engineering, User Authentication, Unix, CompTIA Security+, Cyber Security, Computer Networks, Dynamic Host Configuration Protocol, Domain Name System (DNS), Internet Protocol, Virtual Private Networks (VPN), Network Security, Network Protocols, Open Systems Interconnection (OSI), Anti-Phishing, Security Information and Event Management, PL-SQL, TCP/IP, Transmission Control Protocol (TCP), Software Security, Mitre Att&ck, Firewalls (Computer Science), Cross-Site Scripting (XSS), Information Technology, Cybercrime, Blue Team (Cyber Security)
- **Published:** November 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3ba0ae71f3fe5172

## About the Role

Skills and abilities:

 * Strong critical thinking and problem-solving skills.
 * Strong written and verbal communication skills, including the ability to explain things clearly to non-technical stakeholders.

Cybersecurity knowledge:

 * Knowledge of current threats and vulnerabilities.
 * Familiarity with the MITRE ATT&CK framework (hands-on experience applying it is a plus).
 * Knowledge of authentication, authorization, and access control methods.
 * Understanding of defense-in-depth principles and network security architecture.
 * Understanding of IT security principles and methods, such as firewalls, demilitarized zones (DMZ), virtual private networks (VPN), and encryption.

Networking and infrastructure:

 * Understanding of network traffic flows, including Transmission Control Protocol (TCP) & Internet Protocol (IP), the Open System Interconnection (OSI) Model, and the IT Infrastructure Library (ITIL) framework.
 * Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and directory services.
 * Knowledge of Windows/Unix ports and services.

Nice to bring:

 * Hands-on experience with Security Information and Event Management (SIEM) platforms or log management systems.
 * Experience in an IT infrastructure role such as Systems Administrator, Network Administrator, Systems Engineer, or Network Engineer.
 * Ability to analyze malware.
 * Understanding of system and application security threats, such as buffer overflow, mobile code, cross-site scripting (XSS), PL/SQL injections, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.

Education

 * Bachelor's degree in Computer Science, Information Security, Information Technology, or Cybersecurity. Relevant work experience may be substituted for a degree.
 * Master's degree or four years of relevant work experience is a plus.

Certifications

 * CompTIA Security+ or CompTIA CySA+ is preferred.
 * Also highly valued: TCM Security - PSAA (Practical SOC Analyst Associate), ECTHP (Certified Threat Hunting Professional), or BTL1 (Blue Team Level 1).

## Description

Day to day, you will:

 * Monitor and analyze real-time alerts from our SIEM and other security tools to determine their cause.
 * Investigate network traffic, interpret logs, and analyze packet captures.
 * Detect, investigate, and alert on possible attacks, intrusions, anomalous activity, and misuse, while distinguishing real threats from benign activity.
 * Correlate information from sources across the enterprise to build situational awareness and gauge the effectiveness of an observed attack.
 * Investigate phishing emails.
 * Escalate events and incidents following established procedures and playbooks.
 * Document your findings and actions so they can be clearly shared with internal and external stakeholders.

As you grow with us, you'll also have opportunities to:

 * Proactively hunt for threats and spot adversary activity that doesn't trigger automated alerts.
 * Run intelligence-driven threat hunts to identify indicators of compromise (IOCs) and adversary tactics, techniques, and procedures (TTPs).
 * Analyze intrusion sets to understand the weaknesses exploited, the methods used, and the impact on systems.
 * Hunt for phishing campaigns and emerging attack vectors.
 * Tune security tools for blocking, reporting, and proactive detection based on our customers' business needs.
 * Contribute to projects that strengthen customer environments using lessons from incident response and threat hunting.
 * Develop and refine detection rules, automation playbooks, and security policies., Please Note: All recruiting operations for DOT Security are managed by the Impact Networking Talent Acquisition Team. As a result, candidates should expect recruitment-related communications including application updates, interview scheduling, requests for information, and offer discussions to come from members of the Impact Talent Acquisition team.