Cybersecurity Analyst

We are seeking a motivated Cybersecurity Analyst I to provide entry-level cybersecurity support by monitoring security events, triaging alerts, assisting with incident response, supporting vulnerability management, and maintaining security documentation in alignment with Yulista policies and applicable frameworks (e.g., NIST 800-171, CMMC Level
2). Works under the supervision of the ISSM and uses the Microsoft security stack (Defender, Sentinel, Purview) to safeguard enterprise systems.

• Monitor SIEM (Microsoft Sentinel) alerts; triage low/medium severities and elevate high‑severity events.
• Review Microsoft Defender EDR alerts; collect evidence, isolate endpoints when directed, and follow playbooks.
• Assist with vulnerability scanning (e.g., Tenable/Qualys) and track remediation through POA&M updates.
• Maintain accurate tickets and documentation for incidents, changes, and security controls.
• Support identity and access management reviews, enforcing least‑privilege and recertifications.
• Execute baseline hardening and configuration checks on endpoints and servers per standards.
• Contribute evidence for compliance audits (NIST 800‑171; CMMC L2) and continuous monitoring.
• Participate in phishing simulation analysis and end‑user security awareness activities.
• Draft or improve SOPs, checklists, and runbooks for repeatable security operations.

Strait Sys Inc

Regular

We are seeking a motivated Cybersecurity Analyst I to provide entry-level cybersecurity support by monitoring security events, triaging alerts, assisting with incident response, supporting vulnerability management, and maintaining security documentation in alignment with Yulista policies and applicable frameworks (e.g., NIST 800-171, CMMC Level
2). Works under the supervision of the ISSM and uses the Microsoft security stack (Defender, Sentinel, Purview) to safeguard enterprise systems.

• Monitor SIEM (Microsoft Sentinel) alerts; triage low/medium severities and elevate high‑severity events.
• Review Microsoft Defender EDR alerts; collect evidence, isolate endpoints when directed, and follow playbooks.
• Assist with vulnerability scanning (e.g., Tenable/Qualys) and track remediation through POA&M updates.
• Maintain accurate tickets and documentation for incidents, changes, and security controls.
• Support identity and access management reviews, enforcing least‑privilege and recertifications.
• Execute baseline hardening and configuration checks on endpoints and servers per standards.
• Contribute evidence for compliance audits (NIST 800‑171; CMMC L2) and continuous monitoring.
• Participate in phishing simulation analysis and end‑user security awareness activities.
• Draft or improve SOPs, checklists, and runbooks for repeatable security operations.

• N/A - May provide peer mentoring to interns or new analysts as directed.

• Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; or equivalent experience.
• 0–2 years of hands‑on experience in cybersecurity or IT operations.
• Baseline certification:
  CompTIA Security+ (required or obtained within 6 months of hire); SC‑200 preferred.
• Eligibility to obtain/maintain DoD Secret clearance (active Secret preferred).
• Ability to meet DoD 8140/8570 IAT II requirements within 6 months of hire.

• Primarily office-based within Yulista facilities with potential hybrid work consistent with business needs.
• Occasional after‑hours or on‑call support during incident response or change windows.
• Must comply with company safety, confidentiality, and acceptable use policies.

Preference will be given to Calista shareholders and their descendants and to spouses of…