> Markdown version of [/jobs/ext/4597017-security-analyst](https://www.wearedevelopers.com/jobs/ext/4597017-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst

- **Company:** Syringa Networks
- **Location:** Boise, ID, United States
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Computer Networks, Information Leak Prevention, Domain Name System (DNS), Issue Tracking Systems, IP Addressing, Log Analysis, Anti-Phishing, Security Information and Event Management, Computer Network Operations, Information Technology
- **Published:** November 6, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=031aede2e2a33284

## About the Role

The ideal person for this role is someone who is detail-oriented, curious, and is comfortable with working directly with employees across the organization., * Familiarity with Windows endpoints, Entra ID, and Microsoft 365.

 * Basic understanding of networking concepts such as DNS, IP addressing, and common protocols.
 * Experience with a SIEM or log analysis tool.
 * Experience using a ticketing or service desk system.
 * Clear written and verbal communication, with the ability to explain security issues to non-technical employees.
 * Strong attention to detail and the ability to follow documented procedures consistently., * Associate's or bachelor's degree in cybersecurity, information technology, or a related field, or equivalent combination of education and experience.
 * 0 to 2 years of experience in IT support, help desk, network operations, or a security-related role.

## Description

We are looking for a Security Analyst to act as the first line of defense for user-focused security at Syringa. In this role, you will triage phishing and suspicious email reports, respond to user-related security incidents, and analyze user behavior to spot risk activity before it becomes a problem., Email and Phishing Report Response:

 * Monitor ticketing queue for user-submitted phishing reports, and triage each within defined response times.
 * Analyze suspicious messages, including headers, sender reputation, links, and attachments, using approved tools and sandboxes.
 * Remove malicious messages from user mailboxes and block senders and domains

Security Incident Response:

 * Respond to user-related incidents such as compromised accounts, malware alerts, lost or stolen devices, and suspicious sign-ins.
 * Follow incident response playbooks for containment, including password resets, session revocation, and device isolation.
 * Document incidents, actions taken, and timelines in the ticketing system.
 * Escalate complex or high-severity incidents to senior staff and support them during investigations.

User Behavior Analysis:

 * Review identity and access alerts, such as impossible travel, risky sign-ins, and unusual MFA activity.
 * Monitor data loss prevention and sensitivity labeling alerts for risky handling of confidential information.
 * Identify trends in user risk and recommend targeted follow-up or training.
 * Assist with periodic access reviews and account hygiene checks.

Security Awareness and Continuous Improvement:

 * Support phishing simulation campaigns and security awareness training.
 * Help write and maintain playbooks, knowledge base articles, and user-facing security guidance.
 * Suggest improvements to detection rules, processes, and tools based on lessons learned.