Cybersecurity Analyst
Core
Lead security incident response, investigate alerts, and manage security configurations for customer firewalls, endpoints, and cloud identity platforms.
Role type
Junior to mid-level cybersecurity analyst (SOC)
Builds
Incident response playbooks, detection rules, and secure customer environments
Domain
Cybersecurity / Managed Services
Required skills
Incident investigation, firewall management, Active Directory administration, network fundamentals (TCP/IP, DNS, DHCP, NAT, VPN), security alert triage, root cause analysis, runbook creation, security audit, mentorship
Preferred skills
Endpoint detection and response (EDR), SIEM, log analysis, cloud email and identity security, firewall administration, scripting (PowerShell, Python), CISSP/CCNA progress
Technologies
Active Directory, Cloud Firewall, Support, NAT, PowerShell, Python, Security, TCP/IP, Windows, VPN
Responsibilities
Lead security incident response from detection through containment, remediation, and close-out; Investigate suspicious sign-ins, malware detections, phishing campaigns, and firewall events; Manage security configurations for customer firewalls, endpoints, and cloud identity platforms; Develop and refine detection rules to reduce alert noise; Create and maintain runbooks for consistent handling of common incidents; Audit customer environments to verify security tools are deployed, licensed, and reporting; Review and mentor junior analysts investigations and documentation; Explain incidents and remediation plans to customers; Support security awareness and phishing simulation programs