Cyber Security Analyst

** join our team and experience endless career possibilities
**** if you are an existing team member,*
* ** please click the following link to be taken to the internal career site:
**** position summary:
** the cybersecurity analyst supports mohegan’s enterprise cybersecurity operations by executing and maintaining day‐to‐day security controls, monitoring security events, supporting incident response, and ensuring operational and audit readiness across all properties.this role works closely with corporate governance, it teams, external security partners, and the broader cybersecurity team to ensure security alerts, incidents, and controls are consistently managed, documented, and reported. The cybersecurity analyst plays a key role in audit support, evidence collection, control narrative maintenance, and the production of operational metrics and reporting used to inform leadership and support regulatory and compliance requirements.this

position focuses on the execution, coordination, and continuous improvement of cybersecurity operations, and collaborates with cybersecurity engineers and management to provide operational input and feedback that informs solution engineering and architecture decisions.
** primary duties and responsibilities****:
** include but are not limited to:
** cybersecurity operations & monitoring
*** monitor and manage security alerts and incidents generated by for example, without limitation, reliaquest grey matter **(
** or similar vendor-partners engaged at management’s discretion from time-to-time,) ensuring alerts are triaged, investigated, and resolved in accordance with defined slas and kpis.
* coordinate with internal it teams, mssps, and security vendors to ensure timely and effective incident handling.
* track and report on operational performance metrics related to security alert handling, incident response, and platform health.
* support day‐to‐day operation of cybersecurity platforms (including for example, without limitation, sentinelone, reliaquest, delinea, varonis, tenable, etc.), ensuring controls are functioning as intended.
** endpoint detection & response (edr)
*** administer and support for example, without limitation, sentinelone edr, including:
* monitoring agent health and coverage
* investigating endpoint security alerts
* coordinating remediation and containment actions
* maintain operational documentation and procedures related to edr usage.
* support periodic health reviews and reporting on endpoint protection coverage and effectiveness.
** incident response & preparedness
*** maintain and update the
** cybersecurity incident response plan**, including playbooks, escalation paths, and contact information.
* participate in security incidents and investigations, supporting evidence collection, documentation, and post‐incident analysis.
* support tabletop exercises, lessons learned, and continuous improvement of incident response processes.
** governance, risk, and audit support
*** work directly with
** corporate governance, audit, and compliance teams
** to support internal and external audits.
* collect, validate, and organize audit evidence for cybersecurity‐related controls.
* maintain and update control narratives and supporting documentation for cybersecurity controls that are in scope for audits (e.g., sox, regulatory, or other governance frameworks).
* assist in tracking remediation actions related to audit findings or risk assessments.
** reporting & metrics
*** maintain operational reporting inputs for the monthly cybersecurity operations report, including metrics related to:
* security alerts and incidents
* endpoint protection coverage
* incident response performance
* operational trends and improvements
* develop and enhance metrics, dashboards, and reporting to improve visibility into cybersecurity operations and risk posture.
* collaborate with the cybersecurity manager to identify opportunities to improve reporting clarity and executive‐level communication.
** collaboration & continuous improvement
*** partner with cybersecurity engineers, it operations, application owners, and vendors to ensure cybersecurity controls are operationally effective.
* contribute to…