CYBER Security Analyst l
Listed on 2026-09-22
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations, Network Security
Salary Range: $84,000.00 To $85,000.00 Annually
Location: Sacramento, CA
Job Type: Full-Time
Department: Information Systems / Cybersecurity
Reports To: Senior Cybersecurity Engineer
The Security Analyst I is an entry-level cybersecurity position responsible for supporting the day-to-day operation of the company's information security program. Working under the direction of senior cybersecurity staff, this position assists with security alert monitoring, vulnerability and patch management oversight, software security reviews, security configuration monitoring, audit support, and security reporting.
This role is designed for an individual who has a foundational understanding of information technology and cybersecurity and is interested in developing a career in security operations. The Security Analyst I is not expected to independently design or engineer security solutions. The position works closely with senior security personnel, Information Systems teams, our Managed Service Provider (MSP), Managed Security Service Provider (MSSP), and other technology partners to ensure security activities are completed and appropriately documented.
Key Responsibilities Security Monitoring & Alert Review- Review and triage security alerts generated by security monitoring platforms, endpoint security tools, email security systems, and other security technologies.
- Perform initial investigation and gather relevant information related to security events.
- Follow established procedures for documenting, escalating, and tracking potential security incidents.
- Work with senior cybersecurity staff and security service providers to support incident investigation and response activities.
- Maintain appropriate documentation and evidence related to security events and incidents.
- Assist with the company's vulnerability and patch management program.
- Review vulnerability and patching reports and track identified vulnerabilities through remediation.
- Coordinate with the MSP and internal technology teams to ensure required patches and security updates are completed within established timelines.
- Follow up on outstanding or failed patching activities and elevate exceptions when necessary.
- Assist with validating and documenting remediation activities.
- Prepare regular vulnerability and patch compliance reporting for senior security staff.
- Gather required security and vendor information using established review processes and checklists.
- Review basic security considerations such as data access, authentication, permissions, software source, and requested system privileges.
- Identify requests requiring additional technical or security review and elevate them to senior cybersecurity staff.
- Maintain documentation of software reviews, approvals, exceptions, and security requirements.
- Assist with monitoring security configurations across company-managed endpoints, systems, and security platforms.
- Review security dashboards and reports to identify devices or systems that are missing required security controls or are not meeting established security standards.
- Coordinate remediation activities with the appropriate internal team or service provider.
- Assist with tracking security configuration exceptions and corrective actions.
- Support senior security personnel with security configuration reviews and compliance reporting.
- Perform routine administrative activities within approved security tools and platforms under established procedures.
- Assist with maintaining security policies, procedures, standards, operational documentation, and security records.
- Generate routine security metrics, dashboards, and management reports.
- Assist with tracking security findings, remediation activities, exceptions, and open action items.
- Support the continuous improvement of cybersecurity processes and procedures.
- Assist with periodic user access and security reviews.
- Support reviews of privileged accounts, inactive accounts, access exceptions, and other identity-related security controls.
- Assist with gathering documentation and evidence related to identity and access management controls.
- Escalate identified access concerns or exceptions to senior cybersecurity personnel.
- Assist with cybersecurity awareness and training initiatives.
- Support phishing simulation and security awareness activities.
- Help develop and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).