Cyber Security Operations Analyst

Who we are:

For over 25 years Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving surveillance eDiscovery and analytics solutions. We securely capture and preserve the communications data of the worlds most highly regulated firms giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Though we offer competitive compensation and benefits and all the other perks one would expect from an established company we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. Its a place where you can genuinely make an impact and be recognized for it.

We believe great businesses thrive on diversity inclusion and the contributions of all employees. To that end we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other completely free of barriers.

Your role:

As a Cyber Security Operations Analyst you will play a key role in protecting Global Relay by monitoring the technology environment investigating security events and supporting the timely detection and response to cyber threats. You will operate enterprise security technologies and execute established operational processes to help maintain the confidentiality integrity and availability of the organizations systems and data.

You will work closely with Engineering Infrastructure Product Security Architecture & Technology and other technology teams to investigate security events support incident response activities and contribute to the prioritization of technical vulnerabilities based on exploitability exposure and threat intelligence.

Working within the Security Operations & Threat Management team you will contribute to the continuous improvement of operational processes monitoring capabilities and cyber resilience while helping ensure Global Relay can effectively detect respond to and recover from cyber threats.

Your Responsibilities:

• Monitor and analyze security events to identify malicious activity and support timely detection and response.
• Investigate alerts using endpoint network and cloud telemetry validating events and escalating where appropriate.
• Perform initial incident triage classification and prioritization using established playbooks.
• Execute approved containment actions and support eradication and recovery activities.
• Maintain accurate investigation records evidence and operational documentation.
• Operationalize threat intelligence by correlating indicators of compromise with security events.
• Support risk-based vulnerability prioritization by validating findings and identifying exploitable exposure.
• Collaborate with Infrastructure Engineering and Application Security to support incident resolution.
• Evaluate monitoring effectiveness and recommend improvements to Security Architecture & Technology.
• Contribute to operational metrics lessons learned and continual service improvement.
• Participate in cyber security table top exercises and maintain operational readiness.
• Support a collaborative customer-focused and high-performing security culture.

About You:

• 1-2 years in Cyber Security Information Technology or a related discipline with experience supporting security monitoring incident response or IT operations within enterprise environments.
• Demonstrated experience monitoring and investigating security events across endpoint network cloud or application environments using enterprise security technologies.
• Foundational understanding of cyber threat detection incident response processes and security operations best practices.
• Experience working with technologies such as SIEM EDR/XDR IDS/IPS email security cloud security vulnerability management and identity services.
• Understanding of networking operating systems authentication logging and common attack techniques used by modern threat actors.
• Familiarity with threat intelligence concepts the MITRE ATT&CK framework and risk-based vulnerability management principles.
• Working knowledge of industry frameworks and standards such as…